{"vulnerability": "CVE-2026-8679", "sightings": [{"uuid": "371bb63d-3947-4bc9-8470-303df1ed2480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8679", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmgl3rnuge26", "content": "WordPress alert: AudioIgniter Music Player (\u22642.0.2) has a HIGH severity flaw letting anyone access private playlist metadata. Restrict endpoint access &amp; watch for vendor patches! https://radar.offseq.com/threat/cve-2026-8679-cwe-639-authorization-bypass-through-07a73ddb #OffSeq #WordPress #Security", "creation_timestamp": "2026-05-22T09:00:43.737560Z"}, {"uuid": "fc037a34-4f15-4bb4-b598-13cbcd270577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8679", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116617408744264397", "content": "\ud83d\udd08 CVE-2026-8679 (HIGH): AudioIgniter Music Player plugin \u22642.0.2 lets unauthenticated attackers access any playlist's metadata \u2014 including private &amp; draft tracks \u2014 via insecure playlist ID handling. Restrict access &amp; monitor for patches. https://radar.offseq.com/threat/cve-2026-8679-cwe-639-authorization-bypass-through-07a73ddb #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-05-22T09:00:58.729391Z"}, {"uuid": "a1aea410-2693-4261-90ea-af9e706c6a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8679", "type": "seen", "source": "https://t.me/realcodeb0ss/438", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-8679\n\n\nFofa : body=\"audioigniter_playlist_id\"\n\nEnjoy;", "creation_timestamp": "2026-05-25T22:02:04.000000Z"}, {"uuid": "b78fcb48-87f5-46c0-9d22-afb4f98337d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8679", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8679.yaml", "content": "", "creation_timestamp": "2026-05-22T01:55:43.000000Z"}, {"uuid": "da0364cd-233b-41a5-8df8-8e0ea5c50c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8679", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgogfr6gd2r", "content": "\ud83d\udfe0 CVE-2026-8679 - High (7.5)\n\nThe AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8679/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-22T10:00:21.944494Z"}, {"uuid": "35645326-1a3a-40ac-987a-c3adc3d3029a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmh2mqiuvq2c", "content": "CVE-2026-8679 - AudioIgniter Music Player\nCVE ID : CVE-2026-8679\n \n Published : May 22, 2026, 9:16 a.m. | 3\u00a0hours, 3\u00a0minutes ago\n \n Description : The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. Th...", "creation_timestamp": "2026-05-22T13:38:38.709787Z"}, {"uuid": "f027b776-ce26-41aa-8d8a-6737489ddbef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8679", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmh5mebgn52s", "content": "CVE-2026-8679 audioigniter (CVSS Score 7.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-22T14:32:07.170989Z"}]}