{"vulnerability": "CVE-2026-1335", "sightings": [{"uuid": "604eecef-9df6-4f8b-891a-8aa541fdef0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1335", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-114/", "content": "", "creation_timestamp": "2026-02-19T05:00:00.000000Z"}, {"uuid": "d3b028a6-4ff2-434a-aa14-3b4966d04009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1335", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116081257121464468", "content": "", "creation_timestamp": "2026-02-16T16:30:17.813205Z"}, {"uuid": "f6f0b46a-b143-44fa-bb06-191cfea493a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1335", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meyhwammwv2e", "content": "", "creation_timestamp": "2026-02-16T16:30:19.325083Z"}, {"uuid": "60f7e41a-6c9c-4cac-bf6b-73dde65db1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1335", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mez4dhdb6t2u", "content": "", "creation_timestamp": "2026-02-16T22:35:37.622826Z"}, {"uuid": "bcdeaa95-7560-4d23-ba34-cd107de008c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13351", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp57gm3zje2u", "content": "Zephyr\u306eIPv6\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u30bf\u30c3\u30af\u306b\u304a\u3044\u3066\u3001\u60aa\u610f\u306e\u3042\u308b\u65ad\u7247\u5316IPv6\u30d1\u30b1\u30c3\u30c8\u306e\u51e6\u7406\u306b\u3088\u308aRX\u30d0\u30c3\u30d5\u30a1\u304c\u67af\u6e07\u3057\u3001\u4ee5\u964d\u306e\u30d1\u30b1\u30c3\u30c8\u53d7\u4fe1\u304c\u3067\u304d\u306a\u304f\u306a\u308b\u3002\u7d50\u679c\u3001\u30c7\u30d0\u30a4\u30b9\u3078\u306e\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u653b\u6483\u304c\u53ef\u80fd\u306b\u306a\u308b\u3002\nCVE-2026-13351 CVSS 7.5 | HIGH", "creation_timestamp": "2026-06-25T19:53:38.967781Z"}, {"uuid": "c7db3505-0b12-4165-b430-949410c68674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13357", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpnicpfcpj2h", "content": "CVE-2026-13357 houzez-property-feed (CVSS Score 4.9) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-02T07:15:07.733732Z"}, {"uuid": "c02e8b6e-0933-4f7f-9c5d-9aea1cef8f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13357", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpnlg6szus26", "content": "CVE-2026-13357 - Houzez Property Feed\nCVE ID : CVE-2026-13357\n \n Published : July 2, 2026, 5:35 a.m. | 2\u00a0hours, 11\u00a0minutes ago\n \n Description : The Houzez Property Feed plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and i...", "creation_timestamp": "2026-07-02T08:10:45.702946Z"}, {"uuid": "60e66edd-1adb-417e-a8d7-a7c68a674d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13357", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpotkjd7vd2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-13357 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Houzez Property Feed \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D828CFE7-C523-4F98-AFA0-B6A4AD3696EA", "creation_timestamp": "2026-07-02T20:09:00.595048Z"}, {"uuid": "2978c00e-d7e2-49a5-b827-efbf3c27af15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13357", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpotkkkbz52a", "content": "WordPress Houzez Property Feed \u63d2\u4ef6\u6f0f\u6d1e\u5206\u6790:CVE-2026-13357 SQL\u6ce8\u5165\u98ce\u9669\u53ca\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/E1C12E86-50D7-49EE-BD93-E9190B21A593", "creation_timestamp": "2026-07-02T20:09:02.587318Z"}, {"uuid": "9e1427bc-aa91-4d0e-8e16-5d2e3027ebc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13356", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzci35j6224", "content": "CVE-2026-13356 - Interrupted navigation could allow address bar origin spoofing in Firefox for iOS\nCVE ID : CVE-2026-13356\n \n Published : July 6, 2026, 11:07 p.m. | 40\u00a0minutes ago\n \n Description : A malicious webpage could interrupt a pending navigation by enqueuing a synchron...", "creation_timestamp": "2026-07-07T00:02:42.331722Z"}, {"uuid": "8b7fe1b1-5e9b-434d-ae47-a307f64ad5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13356", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq2rbjado52c", "content": "\ud83d\udd17 CVE : CVE-2026-13356", "creation_timestamp": "2026-07-07T14:00:08.109297Z"}, {"uuid": "815d6d87-389e-45e9-9aae-47be01697805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtuqz2qt27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-13353 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Ultimate CSV Importer: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4DA815EA-DDDE-4BDD-9004-E8B20E3EECA4", "creation_timestamp": "2026-07-11T04:40:38.709678Z"}, {"uuid": "869aac02-5966-4e45-a9b7-4f171ee4e84b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13353", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqduyyvv3g25", "content": "\ud83d\udfe0 CVE-2026-13353 - High (8.8)\n\nThe WP Ultimate CSV Importer \u2013 WordPress Import & Export for CSV, XML & Excel plugin for WordPr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13353/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T05:00:55.328331Z"}, {"uuid": "0a2ae0e5-0253-4d9d-9ffe-c2c256e09fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13353", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqe2fu5x5y2k", "content": "CVE-2026-13353 - WP Ultimate CSV Importer\nCVE ID : CVE-2026-13353\n \n Published : July 11, 2026, 4:17 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : The WP Ultimate CSV Importer \u2013 WordPress Import & Export for CSV, XML & Excel plugin for WordPress is vulnerable to Remot...", "creation_timestamp": "2026-07-11T06:37:34.847889Z"}, {"uuid": "e0663bcf-4089-433a-98fb-b8bafbd74da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13353", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqfuo7u44a23", "content": "CVE-2026-13353. CVSS 8.8. WP Ultimate CSV Importer\u2014any visitor executes code on your server. wp-config.php. Database. Everything exposed. No auth needed.\n\nUpdate to 8.0.1 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #RCE #CyberSecurity", "creation_timestamp": "2026-07-12T00:00:12.806996Z"}, {"uuid": "4c2d4fda-da98-426a-89b4-2e4f31583498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkwocdjeg2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-13353 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Ultimate CSV Importer: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CE55D71A-A246-44DD-8CCA-E8CD4F9EDD16", "creation_timestamp": "2026-07-14T00:19:21.509939Z"}, {"uuid": "084ce909-700b-4f8d-b0f2-ac9573861183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13353", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqs4rtwqt2q", "content": "\u05d4\u05ea\u05e7\u05e4\u05ea CVE-2026-13353: \u05de\u05d4 \u05d6\u05d4, \u05db\u05d9\u05e6\u05d3 \u05d4\u05d5\u05d0 \u05e4\u05d5\u05d2\u05e2 \u05d1-WordPress, \u05d5\u05de\u05d4 \u05dc\u05e2\u05e9\u05d5\u05ea?\n\n\n\nhttps://khesef.xyz/posts/C9302E9A-06EF-40E2-9275-8E63BF85C4E4", "creation_timestamp": "2026-07-16T08:13:57.116055Z"}, {"uuid": "dc855e16-ded0-4458-9e0d-5a1d919ba46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13352", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqt67iafs42k", "content": "CVE-2026-13352 - Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content\nCVE ID : CVE-2026-13352\n \n Published : July 17, 2026, 5:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The Paid Membership Plugin, Ecommerce, User Registr...", "creation_timestamp": "2026-07-17T06:55:32.214643Z"}, {"uuid": "424371c8-caad-4e33-9406-b769066a4c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13352", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqywvag76f2q", "content": "\ud83d\udfe0 CVE-2026-13352 - High (8.8)\n\nThe Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restric...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13352/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T14:00:31.047484Z"}]}