{"vulnerability": "CVE-2026-10818", "sightings": [{"uuid": "c7f5d296-3bb7-4727-b5e6-45c20ca7cc76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10818", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhfjywfly2x", "content": "\ud83d\udfe0 CVE-2026-10818 - High (8.1)\n\nThe WPForms Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10818/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-25T07:59:56.509616Z"}, {"uuid": "e2986c00-ddcd-49b2-ad74-7ad060db39ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10818", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrhglqdnf223", "content": "WPForms Pro (v1.10.1.1\u4ee5\u524d)\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u5b9f\u884c\u53ef\u80fd\u306a\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10818 CVSS 8.1 | HIGH", "creation_timestamp": "2026-07-25T08:18:48.015168Z"}, {"uuid": "eca0adc6-c1c3-4395-b153-840a11b1e98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10818", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrhgncqpfk2v", "content": "WPForms Pro, a popular WordPress form plugin, has a flaw (CVE-2026-10818) that lets an attacker with no login upload a file and run code on the site.\n\nAffects 1.10.1.1 and earlier.\n\nFix: update to 1.10.2 now.", "creation_timestamp": "2026-07-25T08:19:41.032147Z"}, {"uuid": "c8858cca-b30c-477e-ab2e-095826022035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10818", "type": "published-proof-of-concept", "source": "Telegram/yp_fEEogmhEoho25cZ-9np0QuHT4MqV3iiANG19CimuvVnge", "content": "", "creation_timestamp": "2026-07-26T13:00:04.433874Z"}, {"uuid": "7d3d56df-7596-4fe5-9113-cf1f3871a3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10818", "type": "seen", "source": "Telegram/oYN9diVg7I38yCrVGgTerONHpAHmOmUvLdx-0Vt-uNCO0ik", "content": "", "creation_timestamp": "2026-07-26T15:00:28.840409Z"}]}