https://vulnerability.circl.lu/sightings/feed 2026-08-23T13:13:50.833484+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b5b1d513-4ae5-475b-b116-cbbc2d32d4f2/export 2026-08-23T13:13:50.853500+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b5b1d513-4ae5-475b-b116-cbbc2d32d4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtkjkevlxp2v", "content": "CVE-2026-75860: toma de control total en WordPress\n\nPlugin JSON Options en WordPress con CVE-2026-75860: cualquier atacante sin contrase\u00f1a puede tomar control total. Verific\u00e1 si tu sitio est\u00e1 expuesto ahora.\n\n#cve202675860 #jsonoptions #wordpress #escaladadeprivilegios #vulnerabilidadcr\u00edtica", "creation_timestamp": "2026-08-21T00:40:06.451855Z"} 2026-08-21T00:40:06.451855+00:00 https://vulnerability.circl.lu/sighting/85d45f18-177b-4d42-b332-f8c307d39fb9/export 2026-08-23T13:13:50.856218+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "85d45f18-177b-4d42-b332-f8c307d39fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtj7hywmk523", "content": "\ud83d\udea8 CVE-2026-75860 \u2014 CVSS 9.8 CRITICAL\n\nThe JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T12:07:09.237529Z"} 2026-08-20T12:07:09.237529+00:00 https://vulnerability.circl.lu/sighting/c1809561-3289-4de9-8dc2-84a89fb8b94e/export 2026-08-23T13:13:50.856542+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c1809561-3289-4de9-8dc2-84a89fb8b94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiyer75i523", "content": "CVE-2026-75860 - json options\nAn outdated WordPress plugin allows unauthenticated users to modify settings. This can lead to unauthorized user registration and potential site takeover. Update the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonoptions #unknown #CVE #infosec", "creation_timestamp": "2026-08-20T10:00:05.205702Z"} 2026-08-20T10:00:05.205702+00:00 https://vulnerability.circl.lu/sighting/489cdcdc-90f2-4e04-aa8d-90dfcac0f3de/export 2026-08-23T13:13:50.856672+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "489cdcdc-90f2-4e04-aa8d-90dfcac0f3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtipz7f4er27", "content": "JSON Options plugin (\u22640.0.4) hit by CRITICAL vuln (CVE-2026-75860): unauthenticated users can escalate to admin \u2014 full WordPress site takeover possible. Remove or restrict plugin now. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b...", "creation_timestamp": "2026-08-20T07:30:27.252679Z"} 2026-08-20T07:30:27.252679+00:00 https://vulnerability.circl.lu/sighting/31accb5e-a35d-48fa-a3fc-4dda3f3944b0/export 2026-08-23T13:13:50.856823+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "31accb5e-a35d-48fa-a3fc-4dda3f3944b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117126661700027750", "content": "CVE-2026-75860: CRITICAL privilege escalation in JSON Options \u22640.0.4. Unauthenticated attackers can update WordPress options & gain admin access. Remove or disable plugin until fix is available. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b89b1 #OffSeq #WordPress #CVE202675860", "creation_timestamp": "2026-08-20T07:30:25.140616Z"} 2026-08-20T07:30:25.140616+00:00