{"vulnerability": "CVE-2026-6194", "sightings": [{"uuid": "72b92483-a921-49da-ad66-8cafbfd7fac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6194", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfhzlygy22h", "content": "", "creation_timestamp": "2026-04-13T18:17:34.938057Z"}, {"uuid": "a2b6c92f-a324-4467-a8e8-5ef7c6e671af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfosjtfmv2g", "content": "", "creation_timestamp": "2026-04-13T20:18:53.462492Z"}, {"uuid": "4cbf21df-eb2a-4443-917c-95bd395419bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6194", "type": "published-proof-of-concept", "source": "Telegram/61DYlWTca6IkcT_FpN2RYBtwr9MKXFEKysLP63-1xRoUERI", "content": "", "creation_timestamp": "2026-04-13T19:19:04.000000Z"}, {"uuid": "3a3fbf43-0645-46f9-b2ff-4b4356cc830b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61948", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcvplomuv2j", "content": "CVE-2026-61948 - wpdm \u2013 premium packages\nAn attacker can inject malicious SQL code into the WordPress WPDM plugin, potentially allowing them to access sensitive information without a password. This vulnerability\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#shahjada #CVE #infosec", "creation_timestamp": "2026-07-23T13:06:05.003321Z"}, {"uuid": "1c43bce5-b706-4b4b-ad28-1299200a1c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcvpn7bac2s", "content": "CVE-2026-61949 - bookly\nAn attacker can inject malicious SQL code into the WordPress Bookly plugin if it's not updated to a version higher than 27.7. This can lead to unauthorized access to sensitive data. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bookly #CVE #infosec", "creation_timestamp": "2026-07-23T13:06:06.144281Z"}]}