{"vulnerability": "CVE-2026-76009", "sightings": [{"uuid": "a528f2d2-73cf-4e07-a657-ae63ade7deeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117239554096140693", "content": "CVE-2026-76009 (HIGH): Next-Cart Store to WooCommerce Migration \u22643.9.8 exposes an auth bypass via REST API. Attackers can execute arbitrary SQL & delete files \u2014 full site compromise possible. Patch status unknown. Details: https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen1990-next-cart-store-to-woocommerce-e35aad4a96ee528d #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-09-09T06:00:26.725303Z"}, {"uuid": "50c9f2ee-3fb0-4a6f-ab84-b457429b79e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76009", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv2ucq2csq2h", "content": "Next-Cart Store to WooCommerce Migration plugin (\u22643.9.8) hit by HIGH severity auth bypass \u2014 enables unauthenticated SQL execution & admin account creation. Check vendor guidance & monitor for patches. https://radar.offseq.com/threat/cve-2026-76009-cwe-287-improper-authentication-in-martinnguyen19...", "creation_timestamp": "2026-09-09T06:00:28.471008Z"}, {"uuid": "bc2cf7f3-3ec6-4bdb-adf0-71274d11a9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6frwvztmdadfn", "content": "CVE-2026-76009 - Next-Cart Store to WooCommerce Migration\nCVE ID : CVE-2026-76009\n \n Published : 9. September 2026 06:17 | 42\u00a0Minuten ago\n \n Description : The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in all versions u...", "creation_timestamp": "2026-09-09T07:05:49.979480Z"}, {"uuid": "eec6e37c-3479-49ad-a956-666a3286eb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv36hko4jm2m", "content": "\ud83d\udfe0 CVE-2026-76009 - High (8.1)\n\nThe Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76009/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T09:02:08.391074Z"}]}