{"vulnerability": "CVE-2026-5111", "sightings": [{"uuid": "ed039e3d-a4f5-452d-bc02-272b838296b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5111", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml5rd76lcn24", "content": "CVE-2026-5111 gravityforms (CVSS Score 7.2) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T03:33:05.790813Z"}, {"uuid": "540f1102-acc3-4fcd-a0cd-4f52c89a86dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51119", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqcsnl6hmo2b", "content": "CVE-2026-51119\nAn attacker can use the Invixium IXM WEB system to gain elevated access to the system. This could allow them to make changes or access sensitive data they shouldn't be able to. Users should update to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-10T18:46:04.338405Z"}, {"uuid": "06467abc-05fb-4d54-afa1-a1ccf4c45414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51119", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7wcheku2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-51119 \u0432 Invixium IXM WEB: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/2BB85731-3BD5-4C87-838D-D344702E3BF7", "creation_timestamp": "2026-07-10T22:43:35.750921Z"}, {"uuid": "e752b16c-3279-4d7b-b574-e76d40254c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51119", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdh3grr552y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-51119 \u0432 Invixium IXM WEB: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/27451978-E024-4872-97F9-0D235D27456C", "creation_timestamp": "2026-07-11T00:51:44.047028Z"}, {"uuid": "3fecb63c-84c7-46cc-9107-dcc8a15684d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51119", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqfkmmdd2j25", "content": "\ud83d\udd34 CVE-2026-51119 - Critical (9.1)\n\nAn issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /Syste...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-51119/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T21:00:21.736716Z"}, {"uuid": "514cabd8-4867-41b8-aa55-91805fd3e717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5111", "type": "seen", "source": "https://t.me/shimiscyberworld/1121", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-5111 \u2014 CVSS 7.2\nCVE-2026-5111: Gravity Forms Plugin Hit by Stored XSS\n\nCVE-2026-5111 \u2014 The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient input validation and output escaping on Hidden\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #cross_site_scripting_xss\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-5111 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:20.005761Z"}, {"uuid": "f59127b9-0dda-49bc-8757-5c653eeb27be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5111", "type": "seen", "source": "https://t.me/shimiscyberworld/1121", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-5111 \u2014 CVSS 7.2\nCVE-2026-5111: Gravity Forms Plugin Hit by Stored XSS\n\nCVE-2026-5111 \u2014 The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0. This is due to insufficient input validation and output escaping on Hidden\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #cross_site_scripting_xss\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-5111 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:08.500581Z"}]}