{"vulnerability": "CVE-2026-87909", "sightings": [{"uuid": "bab1af1f-0357-4e9b-b2cc-029526f7890c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4l7nwr52b", "content": "\ud83d\udfe0 CVE-2026-87909 - High (7.5)\n\nThe WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87909/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:57.248662Z"}, {"uuid": "79868b9c-47dd-4678-be9a-5abf5a8a0170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117309704660186325", "content": "CVE-2026-87909 RCE in WP Photo Album Plus, CVSS 7.5, unpatched. Subscribers can run code via the ImageMagick filename flaw. Disable or patch now. https://www.valtersit.com/cve/CVE-2026-87909/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-21T15:20:46.499189Z"}, {"uuid": "03474b88-9c6a-430d-9416-817a10ca01ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117309780909682788", "content": "CVE-2026-87909 RCE in WP Photo Album Plus, CVSS 7.5, unpatched. Subscribers can run code via the ImageMagick filename flaw. Disable or patch now. https://www.valtersit.com/cve/CVE-2026-87909/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-21T15:40:03.663950Z"}]}