{"vulnerability": "CVE-2026-6668", "sightings": [{"uuid": "3d99fa20-8e3d-437b-a9e7-416c1059b6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66680", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjfa2bm4a23", "content": "CVE-2026-66680 - locatoraid store locator\nThe Locatoraid Store Locator add\u2011on for WordPress (versions up to 3.9.72) can be triggered by anyone on the internet to send specially crafted requests that run commands\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plainware #CVE #infosec", "creation_timestamp": "2026-08-20T13:50:04.792904Z"}, {"uuid": "f38da593-c540-4b03-abff-a1acdc088d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66682", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjfa3vib62p", "content": "CVE-2026-66682 - abandoned cart pro for woocommerce\nThe shopping\u2011cart recovery plugin for WordPress can be accessed by anyone on the internet, allowing them to upgrade their account to full administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tychesoftwares #CVE #infosec", "creation_timestamp": "2026-08-20T13:50:06.368248Z"}, {"uuid": "b10df4bb-43b0-4824-9c26-72c6ee53e28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66682", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjgbifuj72y", "content": "\ud83d\udea8 CVE-2026-66682 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66682\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T14:08:46.938521Z"}, {"uuid": "8b19dcd2-4f7e-462b-b558-348c040292de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66680", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjgb7z6ij2u", "content": "\ud83d\udea8 CVE-2026-66680 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Locatoraid Store Locator <= 3.9.72 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66680\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T14:08:38.077263Z"}, {"uuid": "0c1784e2-90f5-409c-aa2f-0dbf94ba7782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66688", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mspumcjnfd2w", "content": "CVE-2026-66688 ultimate-elementor (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-10T10:16:09.599618Z"}, {"uuid": "8540010f-bdec-4cd2-bbff-7ef88f2fe92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66688", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msrxo23v5r2w", "content": "CVE-2026-66688 ultimate-elementor (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-11T06:16:08.035092Z"}, {"uuid": "ad6b8c14-559a-4261-8b04-e967a6af8c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6668", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mw7pblxdbi2t", "content": "PgBouncer 1.25.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3092\u5f15\u304d\u8d77\u3053\u3057\u3001CPU\u3092\u98fd\u548c\u3055\u305b\u3001\u5168\u63a5\u7d9a\u3092\u505c\u6b62\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-6668 CVSS 7.5 | HIGH", "creation_timestamp": "2026-09-23T21:38:51.771523Z"}]}