{"vulnerability": "CVE-2026-7856", "sightings": [{"uuid": "8dd753f4-b666-46e5-8dbb-5b3b1e5a8367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml55xpmzzk2i", "content": "CVE-2026-7856 - D-Link DI-8100 Web Management url_member.asp buffer overflow\nCVE ID : CVE-2026-7856\n \n Published : May 5, 2026, 8:16 p.m. | 22\u00a0minutes ago\n \n Description : A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member....", "creation_timestamp": "2026-05-05T21:46:39.038867Z"}, {"uuid": "6c2ca3e9-b7c4-4bb8-b635-563eba23f88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwohr65lm2u", "content": "CVE-2026-78568 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into running extra commands on your website\u2019s database. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T20:40:04.438348Z"}, {"uuid": "0f436f67-7700-4376-85f1-fc638102faf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155327251147740", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations \u22642.0.5. Unauthenticated attackers can extract sensitive DB data via improper input handling. No fix yet \u2014 disable the plugin. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f977190d0ba #OffSeq #WordPress #SQLi #Vuln", "creation_timestamp": "2026-08-25T09:00:26.775095Z"}, {"uuid": "43027947-d3c6-45cc-a170-c9dd1c818816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvherzvbl2f", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations (\u22642.0.5). Unauthenticated DB access possible. Disable plugin until fix is available. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f9771...", "creation_timestamp": "2026-08-25T09:00:29.126842Z"}, {"uuid": "3365153e-8f9f-4b96-9e4d-de38ad3ee3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviybsz4u2a", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78568](https://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wordpress-total-donations-plugin-2-0-5-sql-injection-vulnerability #Vulnerability #CVE ", "creation_timestamp": "2026-08-25T09:29:16.093627Z"}, {"uuid": "d6cf3049-c1de-4071-be0c-41657352fb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78566", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj2ktcbk2s", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78566](https://patchstack.com/database/wordpress/theme/shuffle/vulnerability/wordpress-...\nhttps://patchstack.com/database/wordpress/theme/shuffle/vulnerability/wordpress-shuffle-theme-1-8-local-file-inclusion-vulnerability #PatchManagement #Vulnerability ", "creation_timestamp": "2026-08-25T09:30:32.409541Z"}, {"uuid": "49798394-6e04-451e-b408-a1ee84441b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78563", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj4upyrf2a", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78563](https://patchstack.com/database/wordpress/plugin/notificationx-pro/vulnerability...\nhttps://patchstack.com/database/wordpress/plugin/notificationx-pro/vulnerability/wordpress-notificationx-pro-plugin-3-1-4-cross-site-scripting-xss-vulnerability #Zer", "creation_timestamp": "2026-08-25T09:31:54.980888Z"}, {"uuid": "b523a4df-fa54-4ad7-aedb-966cb99edf09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78562", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtvj757xid2e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78562](https://patchstack.com/database/wordpress/plugin/verdure-core/vulnerability/word...\nhttps://patchstack.com/database/wordpress/plugin/verdure-core/vulnerability/wordpress-verdure-core-plugin-1-2-local-file-inclusion-vulnerability #CVE #ZeroDay #Patch", "creation_timestamp": "2026-08-25T09:33:06.031902Z"}, {"uuid": "9ea94bce-e972-4828-98a0-29ad9da18a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvl4z5g372f", "content": "\ud83d\udea8 CVE-2026-78568 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and includin...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78568\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T10:07:42.055156Z"}, {"uuid": "e0402888-c1d8-43c3-ad35-3550aab247f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78563", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtvric23xy2y", "content": "CVE-2026-78563 - Stored XSS in NotificationX Pro plugin for WordPress (<= 3.1.4). Unauthenticated script injection. CVSS 7.2. Audit sites now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-78563/", "creation_timestamp": "2026-08-25T12:01:23.851141Z"}, {"uuid": "4c692f22-233f-4257-a18f-06d08723043d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78563", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117156038757737191", "content": "CVE-2026-78563 - Stored XSS in NotificationX Pro plugin for WordPress (<= 3.1.4). Unauthenticated script injection. CVSS 7.2. Audit sites now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-78563/", "creation_timestamp": "2026-08-25T12:01:25.610705Z"}, {"uuid": "a30006fe-d473-4253-a4ca-067c7ebc6a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78569", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jgfwtuuoi7to6", "content": "CVE-2026-78569 - Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards\nCVE ID : CVE-2026-78569\n \n Published : Sept. 10, 2026, 9:43 p.m. | 46\u00a0minutes ago\n \n Description : IBM Langflow OSS 1.0.0 through ...", "creation_timestamp": "2026-09-10T22:34:58.325566Z"}, {"uuid": "a599c413-9771-4ec5-b45b-18e162b2b5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78569", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvqangnf3m2w", "content": "\ud83d\udccc CVE-2026-78569 - IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security sc... https://www.cyberhub.blog/cves/CVE-2026-78569", "creation_timestamp": "2026-09-17T18:07:07.606059Z"}]}