{"vulnerability": "CVE-2026-7700", "sightings": [{"uuid": "e30a399c-1dfe-4fd1-8e6d-4c1bd72c8984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137986193455712", "content": "CRITICAL: CVE-2026-77002 in SmilePass Selfie Login WP plugin (\u22641.0.2) allows full account takeover \u2014 no auth needed. Remove/disable plugin until patched. Details: https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #OffSeq #WordPress #Vuln #CVE202677002", "creation_timestamp": "2026-08-22T07:30:23.261960Z"}, {"uuid": "d26947b8-1e8d-4b5d-a7f8-4a0df9911706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnqwyfch424", "content": "SmilePass Selfie Login WP plugin (\u22641.0.2) has a CRITICAL flaw: attackers can bypass authentication and access any account. Remove or disable plugin until a fix is released. https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #O...", "creation_timestamp": "2026-08-22T07:30:25.144677Z"}, {"uuid": "51d39889-ce6e-4dd0-a829-9b612d0ea997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7700", "type": "seen", "source": "https://bsky.app/profile/yogsotho.bsky.social/post/3mowxrnuw722s", "content": "Uh? Need to add this to my multi-exploit kit:\n# Langflow Multi-CVE Exploit Kit\n\n**CVE-2026-7524 (Path Traversal) | CVE-2026-7700 (Lambda eval) | CVE-2026-7687 (CodeParser CMD Injection)**  \n**Military-Grade Multi-Vector RCE Exploitation Framewor\nk**", "creation_timestamp": "2026-06-23T08:20:43.448526Z"}, {"uuid": "e97342eb-3df4-4b2e-a270-ea0b0867ecfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77001", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117139401813989361", "content": "CVE-2026-77001: CRITICAL vuln in Social Login & Sharing buttons with Analytics By SoClever (\u22641.2.0). No auth checks \u2014 attackers can hijack any user session, including admin. Remove/disable plugin pending fix. https://radar.offseq.com/threat/cve-2026-77001-cwe-287-improper-authentication-in-social-login-sharing-buttons-with-analytics-by-c2f4b63e61e43745 #OffSeq #WordPress #CVE202677001 #Vulnerability", "creation_timestamp": "2026-08-22T13:30:23.994878Z"}, {"uuid": "05edcdfd-0cac-482d-b85f-0189254e6467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77001", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtof2qgwpd27", "content": "Social Login & Sharing buttons with Analytics By SoClever \u22641.2.0 has a CRITICAL auth flaw \u2014 attackers can take over any user, even admin. Remove/disable plugin until fixed. https://radar.offseq.com/threat/cve-2026-77001-cwe-287-improper-authentication-in-social-login-sharing-buttons-with-analytic...", "creation_timestamp": "2026-08-22T13:30:25.660147Z"}, {"uuid": "cb9a5038-3a95-4018-bfcf-77809b1f6b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77000", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtr7kvnnmu2t", "content": "CVE-2026-77000 - wp social media login\nThe WP Social Media Login plugin for WordPress does not check that a social sign\u2011in (like Twitter) was really completed before allowing access. Because of this, anyone can enter\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-23T16:30:04.300793Z"}, {"uuid": "cd9c816a-613b-431f-819d-0898813183eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77001", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtr7kx65w32c", "content": "CVE-2026-77001 - social login & sharing buttons with analytics by soclever\nThe Social Login & Sharing buttons plugin for WordPress (versions up to 1.2.0) does not check who is using its login feature, so anyone on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-23T16:30:05.947469Z"}, {"uuid": "d422fe4a-5550-45e4-ba96-455a3c4e089d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtra4rtgo72p", "content": "CVE-2026-77002 - smilepass selfie login\nThe WordPress SmilePass Selfie Login add\u2011on (up to version 1.0.2) does not check who is actually trying to log in. Because of this, anyone can sign in as any existing user,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-23T16:40:04.322894Z"}, {"uuid": "beff1e72-2454-4100-a6f4-3847d50b994c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77000", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtremudj3x2m", "content": "\ud83d\udd34 CVE-2026-77000 - Critical (9.8)\n\nThe WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77000/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T18:00:39.509023Z"}, {"uuid": "ede1969f-46a2-4812-882b-6eaad5daac93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtren2qlot2b", "content": "\ud83d\udd34 CVE-2026-77001 - Critical (9.8)\n\nThe Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77001/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T18:00:45.976248Z"}, {"uuid": "d1c96692-2933-4235-9ca5-fadec9c98a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtrenb63tt2o", "content": "\ud83d\udd34 CVE-2026-77002 - Critical (9.8)\n\nThe SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verifi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T18:00:52.751957Z"}, {"uuid": "d1468dab-63d1-44d1-9b31-a22b2720a2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77003", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtrqujhhvs2k", "content": "CVE-2026-77003 is trending. Hype score 3, currently #9 on cvemon.\n\nThe Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-77003", "creation_timestamp": "2026-08-23T21:39:40.726408Z"}, {"uuid": "ead98365-116a-46b3-8599-b09c68e04236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77007", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mubmcdov752r", "content": "\ud83d\udfe0 CVE-2026-77007 - High (7.5)\n\nThe HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not pe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77007/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T05:00:32.284542Z"}, {"uuid": "a489fa30-6049-420f-9b56-0e52cdb3700c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77009", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukcybx7hl2o", "content": "\ud83d\udea8 CVE-2026-77009 \u2014 CVSS 9.9 CRITICAL\n\nThe WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77009\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T16:07:48.317278Z"}, {"uuid": "9b438ec7-289c-42ff-a85c-b7f15ef269bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77009", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mukkwpstlq2o", "content": "CVE-2026-77009 - watchman-site7\nThe WatchMan\u2011Site7 add\u2011on for WordPress (versions 3.1.1 through 4.2.0) leaves its debug console open to anyone with a basic account. That means a regular user can enter\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#watchmansite7 #unknown #CVE #infosec", "creation_timestamp": "2026-09-02T18:30:05.621725Z"}]}