{"vulnerability": "CVE-2026-4791", "sightings": [{"uuid": "7854e9ac-1650-4fe2-adfc-0703f92920c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47913", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdxp5yde2q", "content": "\ud83d\udfe0 CVE-2026-47913 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47913/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T09:01:17.175142Z"}, {"uuid": "035117aa-20f8-4221-87d7-64722419f0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47914", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwhcppjnh26", "content": "\ud83d\udfe0 CVE-2026-47914 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47914/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T10:00:49.985694Z"}, {"uuid": "491e05f4-7117-40d8-9c62-1888cf0b733e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47915", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwhcxhjig2y", "content": "\ud83d\udfe0 CVE-2026-47915 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47915/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T10:00:58.325875Z"}, {"uuid": "4a1ef472-8afb-4af5-ae1e-e3376e0f1acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47916", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwhd7a6w72n", "content": "\ud83d\udfe0 CVE-2026-47916 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47916/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T10:01:38.551082Z"}, {"uuid": "cba8ba8b-7cd7-4204-91e2-24486b3eeee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47917", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwrddctew27", "content": "\ud83d\udfe0 CVE-2026-47917 - High (7.8)\n\nAcrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-47917/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-10T13:00:07.826018Z"}, {"uuid": "0c789469-368e-4548-b004-52015fc6d14d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4791", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415696733232913", "content": "CVE-2026-4791 PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `logout-url` shortcode's 'button' attribute in all versions up to, and including, 8.2.36 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\nhttps://www.cve.org/CVERecord?id=CVE-2026-4791https://www.wordfence.com/threat-intel/vulnerabilities/id/b33f655a-ad13-45d8-bad9-e7c2599c2490?source=cvehttps://plugins.trac.wordpress.org/changeset/3719931/peprodev-upshttps://plugins.trac.wordpress.org/browser/peprodev-ups/tags/8.2.7/login/login.php#L1110#wordpress #peprodev #PeproDevUltimateProfileSolutions#CVE_2026_4791#bot", "creation_timestamp": "2026-10-10T08:35:49.611285Z"}, {"uuid": "e8ea4406-8253-4c75-8232-9787f40ea901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4791", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d7dtgaarqrznf", "content": "CVE-2026-4791 - PeproDev Ultimate Profile Solutions\nCVE ID : CVE-2026-4791\n \n Published : Oct. 10, 2026, 8:26 a.m. | 54\u00a0minutes ago\n \n Description : The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `logout-url` s...", "creation_timestamp": "2026-10-10T09:53:49.695172Z"}]}