{"vulnerability": "CVE-2026-7826", "sightings": [{"uuid": "cd144631-4380-4576-a217-252f4a662476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78260", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2sr3w5dw2p", "content": "\ud83d\udea8 CVE-2026-78260 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Epayco <= 8.4.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78260\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:37.665656Z"}, {"uuid": "052fee44-9ce5-44b2-b937-396bbf65fb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/482", "content": "python scanner.py -t https://www.rapidseedbox.com/\n[*] Target: https://www.rapidseedbox.com\n[*] CVE-2026-78267 - TranslatePress <= 3.3.2 Unauthenticated Privilege Escalation\n\n[*] Stage 1: Product/Service Detection...\n[+] Stage 1: TranslatePress/WordPress detected\n\n[*] Stage 2: Version Detection...\n[+] Stage 2: Version 2.6.4 in vulnerable range (<= 3.3.2)\n\n[*] Stage 3: Active Vulnerability Testing...\n[*]   Running method: privilege_escalation\n[*]   Running method: access_check\n\n[NOT VULNERABLE]\nConfidence: 70%\nEvidence: No active privilege escalation indicators detected", "creation_timestamp": "2026-08-25T21:00:04.067685Z"}, {"uuid": "890e5945-82be-4f61-9008-28e462cc4695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/480", "content": "CVE-2026-78267 - TranslatePress <= 3.3.2 Unauthenticated Privilege Escalation", "creation_timestamp": "2026-08-25T21:00:04.098918Z"}, {"uuid": "b47adc03-404d-4bcb-bfaa-31936d05d08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ahzqsf6v2jvpj", "content": "CVE-2026-78266 - WordPress AutomatorWP plugin\nCVE ID : CVE-2026-78266\n \n Published : Aug. 24, 2026, 9:31 p.m. | 32\u00a0minutes ago\n \n Description : Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.\n \n Severity: 6.5 | MEDIUM\n \n Visit the link for more details, s...", "creation_timestamp": "2026-08-24T22:14:28.436501Z"}, {"uuid": "c3653456-2334-4539-b6b9-db93744d0e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78268", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5gsq2vvzuxa7p", "content": "CVE-2026-78268 - WordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email \u2013 SiteLeads plugin\nCVE ID : CVE-2026-78268\n \n Published : Aug. 24, 2026, 9:31 p.m. | 32\u00a0minutes ago\n \n Description : Unauthenticated Sensitive Data Exposure in Lead...", "creation_timestamp": "2026-08-24T22:20:28.526907Z"}, {"uuid": "995f6766-6baf-45a2-ba4a-7c6955f53bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/goyackjrwfsqj", "content": "CVE-2026-78267 - WordPress TranslatePress plugin\nCVE ID : CVE-2026-78267\n \n Published : Aug. 24, 2026, 9:31 p.m. | 32\u00a0minutes ago\n \n Description : Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for mor...", "creation_timestamp": "2026-08-24T22:26:28.292715Z"}, {"uuid": "67e2b2b8-0a9d-4255-9605-0a22eb5fe449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78265", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufu62l7y24", "content": "\ud83d\udd34 CVE-2026-78265 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78265/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T23:00:37.448898Z"}, {"uuid": "649c6761-9b08-45a5-8d6e-c4002b97ac08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtufueuszj2b", "content": "\ud83d\udd34 CVE-2026-78267 - Critical (9.8)\n\nUnauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78267/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T23:00:44.553795Z"}, {"uuid": "44f36bb6-f5e4-408e-9ad5-c052aa4562a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78262", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtugwybr742j", "content": "CVE-2026-78262\nVersions of the WP Project Manager plugin up to 4.0.6 let anyone on the internet send specially crafted data that can make the website run their own code. This could let attackers steal data, change site\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:20:05.076578Z"}, {"uuid": "95367cd0-0ea0-4608-9e85-26c165bb3222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78265", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtuhit53l42p", "content": "CVE-2026-78265\nVersions of The Events Calendar up to 6.17.2 can be tricked into loading malicious data without requiring any login. This could let an attacker execute commands on your server, potentially stealing data or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:30:04.389330Z"}, {"uuid": "49058d6f-6d5c-4a62-9f22-14b1eaaec017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtuhiullc325", "content": "CVE-2026-78267\nThe TranslatePress plugin versions up to 3.3.2 allow a person who is not logged in to gain full administrator privileges on your website. This means an attacker could change settings, install malicious code, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:30:05.169277Z"}, {"uuid": "3516042c-96fe-472f-adfc-788d03864da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78267", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117153204482198844", "content": "CVE-2026-78267 (CRITICAL, CVSS 9.8): Cozmoslabs TranslatePress <=3.3.2 is vulnerable to unauthenticated privilege escalation (CWE-266). No patch yet \u2014 monitor vendor advisories for updates. https://radar.offseq.com/threat/cve-2026-78267-cwe-266-incorrect-privilege-assignment-in-cozmoslabs-translatepress-ba0caba45d17d814 #OffSeq #WordPress #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-08-25T00:00:39.946617Z"}, {"uuid": "aa0670fc-8ca0-49e6-ab48-8d5fe34528b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78267", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtuj7htngu2e", "content": "Cozmoslabs TranslatePress <=3.3.2 faces a CRITICAL privilege escalation flaw (CVE-2026-78267, CVSS 9.8). No patch yet \u2014 monitor vendor advisories for updates. https://radar.offseq.com/threat/cve-2026-78267-cwe-266-incorrect-privilege-assignment-in-cozmoslabs-translatepress-ba0caba45d17d814 #OffSe...", "creation_timestamp": "2026-08-25T00:00:38.702044Z"}, {"uuid": "0e4a9378-9cbb-4407-97c2-47ac30f736f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78262", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujn3v3cd2b", "content": "\ud83d\udea8 CVE-2026-78262 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78262\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:08:14.761072Z"}, {"uuid": "ec4b0270-0b8b-4482-a080-fdac6a655989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78265", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujndti2w2p", "content": "\ud83d\udea8 CVE-2026-78265 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78265\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:08:22.941005Z"}, {"uuid": "e51bbc4a-5da1-4eef-9a1d-e2a0d0cf9522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujnmwmkk2j", "content": "\ud83d\udea8 CVE-2026-78267 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78267\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:08:32.626574Z"}, {"uuid": "3ec82247-ccf1-4518-a987-58170fd7f66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78265", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117153557589549950", "content": "CRITICAL CVE-2026-78265: Nexcess The Events Calendar <=6.17.2 has unauthenticated PHP Object Injection (CWE-502). Full system compromise possible. No patch yet \u2014 remove or disable plugin for now. https://radar.offseq.com/threat/cve-2026-78265-cwe-502-deserialization-of-untrusted-data-in-nexcess-the-events-calendar-3dd3af18547313e0 #OffSeq #WordPress #Infosec #CVE2026_78265", "creation_timestamp": "2026-08-25T01:30:23.819125Z"}, {"uuid": "7250618f-1745-4f47-950b-3a4059248411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78265", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtuoa225op2n", "content": "Nexcess The Events Calendar <=6.17.2 faces a CRITICAL flaw (CVE-2026-78265) enabling unauthenticated PHP Object Injection. No patch yet \u2014 remove/disable plugin to reduce risk. https://radar.offseq.com/threat/cve-2026-78265-cwe-502-deserialization-of-untrusted-data-in-nexcess-the-events-calendar-3...", "creation_timestamp": "2026-08-25T01:30:25.761931Z"}, {"uuid": "c6666b0f-c49a-4ff7-8d2a-4100a2801805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78265", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23up6tm2d", "content": "Daily IT Security Digest \u2014 2026-08-25\nObject Injection (CVE-2026-78265) \u2014 Full System Compromise\n\nA critical unauthenticated PHP Object Injection vulnerability (CWE-502) exists in Nexcess The Events Calendar WordPress plugin versions up to 6.17.2. This flaw allows full system compromise since PHP", "creation_timestamp": "2026-08-25T05:02:50.424501Z"}, {"uuid": "251ee347-bbe1-4821-977f-0a64872699ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78265", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.344205Z"}, {"uuid": "78217c3a-2403-4f64-a6c6-901b489085d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78262", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.500138Z"}, {"uuid": "afe3ecba-9ef4-49eb-a434-fdd4eea7efd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.597687Z"}, {"uuid": "10b97d4d-e268-443f-ba0b-b7ba2ab143bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78260", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4nl73stz23", "content": "CVE-2026-78260 - epayco\nThe Epayco add\u2011on for WordPress (versions up to 8.4.6) can be accessed by anyone on the internet and used to send malicious commands to your website's database. This could let an attacker view,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#epayco #CVE #infosec", "creation_timestamp": "2026-08-28T05:40:04.053818Z"}, {"uuid": "2418227b-7ce4-403b-84de-b6c295692fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviagth6v22", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78264](https://patchstack.com/database/wordpress/plugin/toolset-blocks/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/toolset-blocks/vulnerability/wordpress-toolset-blocks-plugin-1-6-26-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2026-08-25T09:15:56.260172Z"}, {"uuid": "f2cd4b6b-5da7-4541-be2d-671a4452b0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtvydptuwn2i", "content": "CVE-2026-78264 - Unauthenticated XSS in Toolset Blocks <= 1.6.26. CVSS 7.1. Update immediately. #CVE #XSS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-78264/", "creation_timestamp": "2026-08-25T14:04:06.049779Z"}, {"uuid": "6111f12b-2032-4eee-8d91-30b198730129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78264", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117156521289980161", "content": "CVE-2026-78264 - Unauthenticated XSS in Toolset Blocks <= 1.6.26. CVSS 7.1. Update immediately. #CVE #XSS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-78264/", "creation_timestamp": "2026-08-25T14:04:07.070787Z"}, {"uuid": "9e349230-edc3-4706-ab39-3b7c6b7ba913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxga25eofg24", "content": "CVE-2026-7826 - falkordb\nFalkorDB versions before 4.18.4 may read past the end of its memory when processing specially crafted replication data. An attacker who can send replication commands, such as on an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#falkordb #CVE #infosec", "creation_timestamp": "2026-10-09T05:20:05.248743Z"}]}