{"vulnerability": "CVE-2026-66047", "sightings": [{"uuid": "e733d6c5-85c6-474e-9838-03f18009b539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66047", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mufbmnkhyl2f", "content": "CVE-2026-66047 - profilepress\nThe ProfilePress add\u2011on for WordPress (versions before 4.17.2) can be tricked by anyone on the internet into downloading and turning on any other plugin you choose.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#profilepress #properfraction #CVE #infosec", "creation_timestamp": "2026-08-31T16:00:05.418809Z"}, {"uuid": "1c96fb58-477c-4f2b-9699-3d0906898d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66047", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mufc22btmc2m", "content": "\ud83d\udea8 CVE-2026-66047 \u2014 CVSS 9.2 CRITICAL\n\nProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66047\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T16:07:35.447508Z"}]}