{"vulnerability": "CVE-2026-78568", "sightings": [{"uuid": "6c2ca3e9-b7c4-4bb8-b635-563eba23f88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwohr65lm2u", "content": "CVE-2026-78568 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into running extra commands on your website\u2019s database. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T20:40:04.438348Z"}, {"uuid": "0f436f67-7700-4376-85f1-fc638102faf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155327251147740", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations \u22642.0.5. Unauthenticated attackers can extract sensitive DB data via improper input handling. No fix yet \u2014 disable the plugin. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f977190d0ba #OffSeq #WordPress #SQLi #Vuln", "creation_timestamp": "2026-08-25T09:00:26.775095Z"}, {"uuid": "43027947-d3c6-45cc-a170-c9dd1c818816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvherzvbl2f", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations (\u22642.0.5). Unauthenticated DB access possible. Disable plugin until fix is available. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f9771...", "creation_timestamp": "2026-08-25T09:00:29.126842Z"}, {"uuid": "3365153e-8f9f-4b96-9e4d-de38ad3ee3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviybsz4u2a", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78568](https://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wordpress-total-donations-plugin-2-0-5-sql-injection-vulnerability #Vulnerability #CVE ", "creation_timestamp": "2026-08-25T09:29:16.093627Z"}, {"uuid": "9ea94bce-e972-4828-98a0-29ad9da18a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvl4z5g372f", "content": "\ud83d\udea8 CVE-2026-78568 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and includin...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78568\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T10:07:42.055156Z"}]}