{"vulnerability": "CVE-2026-18467", "sightings": [{"uuid": "768a8adb-74c9-4a70-87f3-ee132ae31f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18467", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwa6glhb6q2n", "content": "CVE-2026-18467 - paytium: mollie payment forms & donations\nThe Paytium Mollie payment forms and donations plugin for WordPress can be tricked into giving a new user full administrator rights. An attacker can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#paytiumsupport #CVE #infosec", "creation_timestamp": "2026-09-24T02:10:05.232991Z"}, {"uuid": "1c4c67de-2f65-4324-a46c-4f9a302276a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18467", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117323780970692075", "content": "CVE-2026-18467: CRITICAL privilege escalation in Paytium: Mollie payment forms (\u22645.0.3). Unauthenticated users can create admin accounts via exploited payment forms. Restrict forms or disable plugin until full fix. https://radar.offseq.com/threat/cve-2026-18467-cwe-269-improper-privilege-management-in-paytiumsupport-paytium-mollie-payment-forms-816d892a2e04a4c5 #OffSeq #WordPress #CVE202618467 #Security", "creation_timestamp": "2026-09-24T03:00:26.600128Z"}, {"uuid": "044d4c73-13da-471b-8c97-856dfdb4275b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18467", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwabaoecgs2m", "content": "CRITICAL: Paytium: Mollie plugin (\u22645.0.3) lets unauthenticated attackers create admin accounts via exposed payment forms. Restrict access or disable plugin until a full fix ships. https://radar.offseq.com/threat/cve-2026-18467-cwe-269-improper-privilege-management-in-paytiumsupport-paytium-mollie...", "creation_timestamp": "2026-09-24T03:00:29.036577Z"}, {"uuid": "6f07d823-ef54-4f05-b570-ae238fe29714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18467", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwaey6nrwi2f", "content": "\ud83d\udea8 CVE-2026-18467 \u2014 CVSS 9.8 CRITICAL\n\nThe Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18467\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T04:07:17.976517Z"}, {"uuid": "c20fb153-35da-46eb-98d4-6f7e2bc46321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18467", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2rpi2c2q", "content": "Daily IT Security Digest \u2014 2026-09-24\nPaytium WordPress Plugin Privilege Escalation (CVE-2026-18467)\nCVSS 9.8 critical privilege escalation in the Paytium: Mollie payment forms and donations WordPress plugin. Unauthenticated attackers can exploit compromised payment forms to create admin accounts,", "creation_timestamp": "2026-09-24T05:02:26.600139Z"}, {"uuid": "f922947e-0dbe-457a-8b0f-20238007de62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18467", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2rxwgg2a", "content": "Daily IT Security Digest \u2014 2026-09-24\nfull control over WordPress installations. Operators of sites using this plugin should restrict form access or disable it until a full patch is available.\nhttps://stemshop.top/cve/CVE-2026-18467\n\n## 5. Actively Exploited Cisco ISE Auth Bypass (CVE-2026-76460)\nA", "creation_timestamp": "2026-09-24T05:02:27.096102Z"}, {"uuid": "ad030e52-8ddf-45fd-a205-9b54b4b2043b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18467", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwardixuua2c", "content": "\ud83d\udd34 CVE-2026-18467 - Critical (9.8)\n\nThe Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Esc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18467/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T07:48:23.735894Z"}, {"uuid": "70b69b1b-e108-4a4f-8c77-54ec2367e647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18467", "type": "seen", "source": "https://gist.github.com/ichintu/92fa30b776164d4fd0064893c85d488e", "content": "This cyber threat intelligence digest highlights three key updates:\n\n\u2022 **AI-Assisted EDR Bypass:** Researchers demonstrated using an uncensored local AI model (Qwen 3.8 27B) to develop an LSASS dumper that evades endpoint detection and response systems.  \n\u2022 **Industry Hiring:** AIKOCorp, a cybersecurity and AI research lab, is seeking a remote Full-stack Engineer with expertise in Go, React, TypeScript, and cloud observability infrastructure.  \n\u2022 **Critical WordPress Vulnerability:** CVE-2026-18467 (CVSS 9.8) affects Paytium \u22645.0.3, allowing unauthenticated privilege escalation to admin via an unchecked form parameter, enabling full site takeover.", "creation_timestamp": "2026-09-24T08:00:32.000000Z"}]}