{"vulnerability": "CVE-2026-12995", "sightings": [{"uuid": "763ff8e7-0d17-4e75-8e9f-f3f44223c73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12995", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117363338259476303", "content": "CVE-2026-12995: Custom Field Template WP plugin IDOR lets contributors delete arbitrary media site-wide. CVSS 4.3, unpatched. Patch now: https://www.valtersit.com/cve/CVE-2026-12995/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-01T02:40:22.921513Z"}, {"uuid": "7521b11b-e8bf-497b-b222-6b0b3fef680b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12995", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwruifphfj2g", "content": "CVE-2026-12995: Custom Field Template WP plugin IDOR lets contributors delete arbitrary media site-wide. CVSS 4.3, unpatched. Patch now: https://www.valtersit.com/cve/CVE-2026-12995/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-01T03:00:04.659029Z"}]}