{"vulnerability": "CVE-2026-85681", "sightings": [{"uuid": "374a0634-6b36-4d5d-8103-917dd439274f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85681", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117257956517856963", "content": "CVE-2026-85681 (CRITICAL): WP Component plugin \u22642.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam", "creation_timestamp": "2026-09-12T12:00:25.164881Z"}, {"uuid": "d97447b5-1322-4636-a7fb-3c7e7a61bcd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85681", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvczt6g4sa2y", "content": "WP Component \u22642.2.4 has a CRITICAL privilege flaw: unauthenticated users can overwrite site options, risking WordPress takeover. Check vendor guidance & review affected sites ASAP. https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526e...", "creation_timestamp": "2026-09-12T12:00:27.333914Z"}, {"uuid": "3471f420-a8ac-4973-9135-c32020af932e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdkl2tykj2j", "content": "CVE-2026-85681 - wp component\nThe WP Component WordPress plugin up to version 2.2.4 lets anyone on the internet change any setting on your site because it does not verify who is making the request. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wpcomponent #unknown #CVE #infosec", "creation_timestamp": "2026-09-12T17:00:11.560599Z"}, {"uuid": "73c72b60-a28b-44cf-9514-2a2613ff5bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85681", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdkm2u2oc2r", "content": "\ud83d\udd34 CVE-2026-85681 - Critical (9.8)\n\nThe WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85681/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T17:00:42.472161Z"}]}