{"vulnerability": "CVE-2026-9273", "sightings": [{"uuid": "a8c8da28-4dd9-42de-8ddb-d11abd8a58df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9273", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117041373701599609", "content": "Kadence Memberships (stellarwp) \u22644.0.0 suffers CRITICAL vuln (CVE-2026-9273, CVSS 9.3): attackers can hijack any account by poisoning password reset links. Restrict reset features & monitor for patches. https://radar.offseq.com/threat/cve-2026-9273-cwe-640-weak-password-recovery-mechanism-for-forgotten-password-in-stellarwp-membership-10c6cffc948a3c97 #OffSeq #WordPress #Vuln #Security", "creation_timestamp": "2026-08-05T06:00:33.963203Z"}, {"uuid": "31a8d0a6-948b-4a0d-8c0f-fd68db899669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9273", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msctyppdsc2t", "content": "Kadence Memberships plugin \u22644.0.0 hit by CRITICAL CVE-2026-9273: attackers can hijack accounts via poisoned password reset links. Restrict reset functionality & watch for patches. https://radar.offseq.com/threat/cve-2026-9273-cwe-640-weak-password-recovery-mechanism-for-forgotten-password-in-stel...", "creation_timestamp": "2026-08-05T06:00:35.632663Z"}, {"uuid": "4bde4c0d-6c8d-4ad8-b71c-7bf42196072f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mscxkagysn2p", "content": "CVE-2026-9273 - membership plugin \u2013 kadence memberships\nA security issue in the Kadence Memberships plugin for WordPress allows attackers to take control of any account, including administrator accounts, by sending\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#stellarwp #CVE #infosec", "creation_timestamp": "2026-08-05T07:04:04.226794Z"}, {"uuid": "9f965353-aa55-4650-b20b-e9e0a3e443e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9273", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mser5y3n3s2t", "content": "CVE-2026-9273 restrict-content (CVSS Score 9.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T00:15:10.202269Z"}]}