{"uuid": "fc8a5fa0-f9cd-4c8d-bcaa-d51db56e702e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvngorqvff2t", "content": "Attackers are exploiting a critical vulnerability (CVE-2026-27540) in the WooCommerce Wholesale Lead Capture plugin, allowing them to take control of WordPress sites without authentication. The flaw, with a CVSS score of 9.8, affects versions up to 2.0.3.1.", "creation_timestamp": "2026-09-16T15:17:16.521388Z"}