{"vulnerability": "CVE-2026-41555", "sightings": [{"uuid": "0f34e9b9-7a71-4f3b-b01a-f34e52851258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41555", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tfqyqh2l", "content": "\ud83d\udea8 CVE-2026-41555 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Newsletter Subscription Form \u2013 User Subscriptions Form, Capture Email <= 1...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-41555\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:47.047529Z"}, {"uuid": "0af92ffd-31ab-4ad3-a05a-f799b23f13f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41555", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393852207082875", "content": "Unauthenticated SQL Injection (CVE-2026-41555, CRITICAL, CVSS 9.3) in Weblizar Newsletter Subscription Form <=1.5.9 impacts WordPress sites. Patch status unknown \u2014 restrict/disable the component. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07f0f81651ae4a40 #OffSeq #WordPress #Infosec #SQLInjection", "creation_timestamp": "2026-10-06T12:00:28.822764Z"}, {"uuid": "c5c3aa17-a4d5-4fd3-9e29-3e3f6416940c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41555", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx7ezeyahs23", "content": "Weblizar Newsletter Subscription Form <=1.5.9 hit by CRITICAL unauthenticated SQL Injection (CVSS 9.3). Patch status unknown \u2014 disable or restrict immediately. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07...", "creation_timestamp": "2026-10-06T12:00:30.652652Z"}, {"uuid": "184f4d22-4d10-4865-b420-428b4d8bcfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuncvoc27", "content": "CVE-2026-41555 - newsletter subscription form \u2013 user subscriptions form, capture email\nThe Capture Email plugin for WordPress (versions up to 1.5.9) allows anyone on the internet to send specially crafted requests that run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T21:40:04.417064Z"}]}