{"vulnerability": "CVE-2026-1448", "sightings": [{"uuid": "0e91c2d4-c756-4d79-be3e-bad305cbb0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdeslqeakh2t", "content": "", "creation_timestamp": "2026-01-27T03:22:50.935621Z"}, {"uuid": "7c49f622-e6c3-41fd-9ef0-8d02d2295acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14487", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq4d4hox3y2r", "content": "CVE-2026-14487 - simple coherent form\nThe Simple Coherent Form plugin for WordPress has a security issue that could allow an attacker to delete any file on your server without needing a password. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tombgtn #CVE #infosec", "creation_timestamp": "2026-07-08T04:52:05.778653Z"}, {"uuid": "97ca1fa8-2ee7-4cf7-894a-2b81432a63f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14487", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mq4gw7nccj27", "content": "CVE-2026-14487. 9.1/10 critical. Simple Coherent Form up to 2.4.13 lets anyone delete arbitrary files. Your wp-config.php. Your database backups. Your entire site. No authentication required.\n\nUpdate to 2.4.13 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #RCE #CyberSecurity", "creation_timestamp": "2026-07-08T06:00:10.567449Z"}, {"uuid": "d91cf290-fa0f-4b80-bd7c-f95a63ca8aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14489", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mq4l5yqzvw22", "content": "CVE-2026-14489 whmcs-bridge (CVSS Score 8.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-08T07:16:06.953899Z"}, {"uuid": "7e3bcf1d-761b-4482-8f1d-73d50fe81fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14482", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq4lrjxew42l", "content": "CVE-2026-14482 - \u591a\u8bf4\u793e\u4f1a\u5316\u8bc4\u8bba\u6846\nCVE ID : CVE-2026-14482\n \n Published : July 8, 2026, 5:16 a.m. | 52\u00a0minutes ago\n \n Description : The \u591a\u8bf4\u793e\u4f1a\u5316\u8bc4\u8bba\u6846 plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2. The vulnerability exists due to a missi...", "creation_timestamp": "2026-07-08T07:27:02.590898Z"}, {"uuid": "437339b5-0b20-4bc7-80e6-5781c3705765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14487", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq4m2ikekn2t", "content": "CVE-2026-14487 - Simple Coherent Form\nCVE ID : CVE-2026-14487\n \n Published : July 8, 2026, 5:16 a.m. | 52\u00a0minutes ago\n \n Description : The Simple Coherent Form plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the removeU...", "creation_timestamp": "2026-07-08T07:32:06.281907Z"}, {"uuid": "8c183b55-d5f4-45f1-a9ee-3ae574b2dc32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq4nlgda2z27", "content": "CVE-2026-14489 - WHMCS Bridge\nCVE ID : CVE-2026-14489\n \n Published : July 8, 2026, 6:16 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : The WHMCS Bridge plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the connect() function in...", "creation_timestamp": "2026-07-08T07:59:26.280076Z"}, {"uuid": "ae927b37-65a8-4744-afc3-e0802b0bbfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14482", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mq6dcbzxg52n", "content": "CVE-2026-14482. 8.8/10. \u591a\u8bf4\u793e\u4f1a\u5316\u8bc4\u8bba\u6846 plugin lets any visitor hijack admin accounts. Missing nonce. Forged signatures. Your site's compromised.\n\nUpdate to 1.2. now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "creation_timestamp": "2026-07-09T00:00:40.690515Z"}, {"uuid": "e9723862-6e55-45ae-909d-9a766a548075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14489", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mq6dcdlpdd22", "content": "Attackers upload shells. Grab wp-config.php. Own your database. CVE-2026-14489 in WHMCS Bridge (8.8/10). Authenticated upload flaw in all versions through 6.9. Update now. Scan your WordPress site: pulse-wp.com\n#WordPress #RCE #CyberSecurity", "creation_timestamp": "2026-07-09T00:00:41.924528Z"}, {"uuid": "94737441-6aad-40c7-8098-d4a092e112aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14480", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-01", "content": "", "creation_timestamp": "2026-07-09T16:15:05.644271Z"}, {"uuid": "a0762e0b-8333-4782-bbe0-02f55884517f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14480", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqdc6oqfrg2b", "content": "CVE-2026-14480 - openplc\nAn attacker with a valid login can upload a malicious file to OpenPLC v3, potentially allowing them to execute arbitrary code on the system. This can happen if the attacker uploads a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openplc #CVE #infosec", "creation_timestamp": "2026-07-10T23:24:04.416354Z"}, {"uuid": "8b8241d1-4e71-4323-ab80-1986fe1afd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqdgjoq36d2z", "content": "CVE-2026-14480 - OpenPLC v3 External Control of File Name or Path\nCVE ID : CVE-2026-14480\n \n Published : July 10, 2026, 11:16 p.m. | 32\u00a0minutes ago\n \n Description : OpenPLC Runtime v3 contains an authenticated arbitrary file write \nvulnerability in the legacy web UI program\u2011up...", "creation_timestamp": "2026-07-11T00:41:48.641946Z"}, {"uuid": "ef5fa1d2-2479-454e-b629-f63789721c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14480", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdr7e6iiq26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14480 \u0432 OpenPLC Runtime v3: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\n\nhttps://kripta.biz/posts/8FD8DAE6-2897-4FF8-AB4E-FD9FB32FC071", "creation_timestamp": "2026-07-11T03:52:52.939177Z"}, {"uuid": "ade69db0-8c5f-4599-a0c0-d1300f3a5872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14480", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqej4pcoh22c", "content": "\ud83d\udd34 CVE-2026-14480 - Critical (9.9)\n\nOpenPLC Runtime v3 contains an authenticated arbitrary file write \nvulnerability in the legacy we...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-14480/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T11:00:59.666833Z"}]}