{"vulnerability": "CVE-2026-19598", "sightings": [{"uuid": "3fac88ee-9cd7-4026-b181-855845b99780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-17T18:00:05.311482Z"}, {"uuid": "40ef3a8a-d463-4c59-8aad-e592b6d300b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/20v2IoyFQshDHts5_7Yn4T7Cia_Iss1KLurhB1ZSh0DbW1c", "content": "", "creation_timestamp": "2026-08-22T00:00:09.601939Z"}, {"uuid": "36964516-706d-460e-b533-add06b0d4fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-18T00:00:11.081731Z"}, {"uuid": "4fc000df-0415-47d9-8010-f892034ee1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtm5vbvylg27", "content": "CVE-2026-19598, a CVSS 9.8 flaw in the Pods WordPress plugin, enables complete site takeover. Wordfence is already blocking attacks in the wild.\n\n#Pods #CVE202619598 #WordPress #PrivilegeEscalation #SiteTakeover #WebSecurity", "creation_timestamp": "2026-08-21T16:16:46.858222Z"}, {"uuid": "192892bc-3294-422b-bd74-c463ba04f27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5bgdy5vm23", "content": "CVE-2026-19598 - pods \u2013 custom content types and fields\nThe Pods plugin for WordPress has a security flaw that lets attackers take control of your site without needing a password. This could let them change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sc0ttkclark #CVE #infosec", "creation_timestamp": "2026-08-15T18:10:04.721037Z"}, {"uuid": "42dac3e4-02ee-448f-b1c0-8b62632531d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ea3j2qc22", "content": "\ud83d\udd34 CVE-2026-19598 - Critical (9.8)\n\nThe Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Esca...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19598/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T19:00:16.059388Z"}, {"uuid": "2b56c467-c54d-4d1f-a11f-4745922078bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtn4nu7eqa2k", "content": "100.000 sitios WordPress expuestos por fallo en plugin Pods\n\n\u00bfTu WordPress usa Pods? La falla CVE-2026-19598 deja 100.000 sitios WordPress expuestos: un atacante puede tomar el control en minutos. Cheque\u00e1 tu versi\u00f3n\n\n#pods #cve202619598 #escaladadeprivilegios #seguridadwordpress #pluginswordpress", "creation_timestamp": "2026-08-22T01:27:25.352409Z"}, {"uuid": "4d97d5ae-22d2-432f-bbbf-af970f21c4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/VqkK0eXOWhmRJZ90Bh3PqTJte1bxm7THA5YDoOUEdQFD0DQ", "content": "", "creation_timestamp": "2026-08-20T03:00:03.378531Z"}, {"uuid": "40a16792-5b57-422d-8808-be916e1b1716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "Telegram/8WvP_FT-f7WzYbsij8a64BMZqLNb4WRxjiDs2Lo6HyIBG_I", "content": "", "creation_timestamp": "2026-08-20T03:00:05.057010Z"}, {"uuid": "4677a5d0-98de-4fa9-81fd-390382d76b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/8WvP_FT-f7WzYbsij8a64BMZqLNb4WRxjiDs2Lo6HyIBG_I", "content": "", "creation_timestamp": "2026-08-21T00:00:11.320327Z"}, {"uuid": "a0fb84a3-be47-48a7-922b-56a8163da1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/VqkK0eXOWhmRJZ90Bh3PqTJte1bxm7THA5YDoOUEdQFD0DQ", "content": "", "creation_timestamp": "2026-08-21T00:00:11.563843Z"}, {"uuid": "9d8fb09c-6226-4379-8c63-8c39145ed922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-28T00:00:09.695286Z"}, {"uuid": "6b228097-b74a-4f37-a98e-7f665f98b5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-24T15:00:05.948925Z"}, {"uuid": "89d27562-7d00-44a7-9f8a-b2164f818d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-rilevata-vulnerabilita-nel-plugin-pods", "content": "", "creation_timestamp": "2026-08-28T12:45:05.858281Z"}, {"uuid": "641187f4-718d-4568-8f1d-f9842da2f515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://t.me/GithubRedTeam/98705", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19598-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 02:13:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:06.154243Z"}, {"uuid": "3e01fe1b-81ae-4195-9fa1-01e3e536fa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98705", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19598-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 02:13:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:11.783483Z"}, {"uuid": "a0fe841f-2b87-47f9-8e55-6d559ea4692a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtywdbqygh2x", "content": "CVE-2026-19598 is trending. Hype score 5, currently #4 on cvemon.\n\nThe Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19598", "creation_timestamp": "2026-08-26T18:06:03.847541Z"}, {"uuid": "83d656f9-caf6-42c4-b49e-550ee61c1ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-25T00:00:07.413110Z"}, {"uuid": "3237dba7-3374-424a-8ea8-8a94f3a1bef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-26T00:00:07.018868Z"}, {"uuid": "c1bea680-620d-441a-81f4-3dd3cdc4af34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/475", "content": "CVE-2026-19598-PoC ->", "creation_timestamp": "2026-08-26T00:00:10.398625Z"}, {"uuid": "7470f151-dcdc-4833-9329-fa43e7635b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/476", "content": "", "creation_timestamp": "2026-08-26T00:00:10.360585Z"}, {"uuid": "35f8ff6a-c801-4d77-aa27-934ce5b7226e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/772a9cf6-451d-498c-ac93-3c264c90738d", "content": "", "creation_timestamp": "2026-08-23T09:00:46.133015Z"}, {"uuid": "b115e47b-744c-466d-b97f-75802f9b6ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-27T00:00:10.214835Z"}, {"uuid": "545bdbd3-f65c-4dcc-85b1-4daaae1b7976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23u5pzq2n", "content": "Daily IT Security Digest \u2014 2026-08-25\nVulnerability (CVE-2026-19598) \u2014 Full Site Takeover\n\nAn unauthenticated authorization bypass in the widely-used Pods WordPress plugin (CVE-2026-19598) allows attackers to bypass security checks entirely and gain full administrator access. This gives attackers", "creation_timestamp": "2026-08-25T05:02:49.898679Z"}, {"uuid": "3503ebb2-2985-4b13-a803-cc20ab020126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu2eihqcj426", "content": "Wordfence found CVE-2026-19598, a critical unauthenticated flaw in the Pods WordPress plugin (100,000+ installs) letting attackers reset any password, including the admin's.\n\n#PodsPlugin #CVE202619598 #WordPress #Wordfence #PrivilegeEscalation", "creation_timestamp": "2026-08-27T07:52:09.780345Z"}, {"uuid": "2e8e187f-d403-4703-abbf-417a8b5532df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mu2epr2lsy2u", "content": "CVE-2026-19598: Pods\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30ea\u30bb\u30c3\u30c8\u53ef\u80fd\u306b\n\nWordPress\u30b5\u30a4\u30c8\u7ba1\u7406\u8005\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u30ed\u30b0\u30a4\u30f3\u3059\u3089\u7d4c\u305a\u306b\u5909\u66f4\u3055\u308c\u3066\u3057\u307e\u3046\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u4eba\u6c17\u30d7\u30e9\u30b0\u30a4\u30f3Pods\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3092\u6301\u305f\u306a\u3044\u7b2c\u4e09\u8005\u304c\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u3092\u6b21\u3005\u3068\u56de\u907f\u3057\u3001\u7ba1\u7406\u6a5f\u80fd\u306b\u76f4\u63a5\u5230\u9054\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u3063\u3066\u3044\u307e\u3057\u305f\u3002Wordfence\u306b\u3088\u308b\u3068...", "creation_timestamp": "2026-08-27T07:56:14.041021Z"}, {"uuid": "a33b955a-ea8e-4291-b52c-5946c836e523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/476", "content": "", "creation_timestamp": "2026-08-25T12:00:04.193063Z"}, {"uuid": "3822cfbe-f7e3-43f9-a95f-9668df2c93e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/475", "content": "CVE-2026-19598-PoC ->", "creation_timestamp": "2026-08-25T12:00:04.238647Z"}, {"uuid": "db1b994f-2c1b-4871-b3b9-67db8f81e707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "content": "", "creation_timestamp": "2026-09-08T04:00:03.687633Z"}, {"uuid": "5c4b1e33-8d5b-4421-b267-6ca6f1a07c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "content": "", "creation_timestamp": "2026-09-09T00:00:42.050692Z"}]}