{"vulnerability": "CVE-2026-94388", "sightings": [{"uuid": "74678738-2929-4269-a6e0-3f08700a9ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94388", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxy4ap3wu227", "content": "CVE-2026-94388 - green popups\nThe Green Popups extension for WordPress, versions prior to 7.6.3, can be tricked into revealing information from its database. This could let a malicious user discover\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#greenpopups #halfdata #CVE #infosec", "creation_timestamp": "2026-10-16T08:00:05.361067Z"}, {"uuid": "a08bd754-987f-4e87-b32f-63b3355a59e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94388", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117449549543393694", "content": "CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.\nhttps://www.cve.org/CVERecord?id=CVE-2026-94388https://patchstack.com/database/wordpress/plugin/halfdata-green-popups/vulnerability/wordpress-green-popups-plugin-7-6-3-sql-injection-vulnerability?_s_id=cve#halfdata #GreenPopups#CVE_2026_94388#bot", "creation_timestamp": "2026-10-16T08:05:02.530901Z"}, {"uuid": "f1840b93-1503-416e-ac9f-6bcc39564c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94388", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxy4oqmqwx2w", "content": "\ud83d\udea8 CVE-2026-94388 \u2014 CVSS 9.3 CRITICAL\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfd...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94388\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-16T08:07:56.868789Z"}, {"uuid": "c437f8e9-f977-4c44-bc85-e5deec6726f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94388", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxy7mnzyz423", "content": "CRITICAL SQL Injection (CVE-2026-94388) in halfdata Green Popups <7.6.3 lets attackers extract sensitive data remotely. Patch status unconfirmed \u2014 review controls ASAP. https://radar.offseq.com/threat/cve-2026-94388-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-...", "creation_timestamp": "2026-10-16T09:00:28.521236Z"}, {"uuid": "8ce7d8b4-3914-4d1c-ac39-aa8f6053fea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94388", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117449767396431044", "content": "CVE-2026-94388: CRITICAL SQL Injection in halfdata Green Popups (<7.6.3). Blind SQLi allows remote, unauthenticated data extraction. Patch status unclear \u2014 apply input validation. https://radar.offseq.com/threat/cve-2026-94388-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-999d0b4727612d6b #OffSeq #SQLInjection #Infosec #WordPress", "creation_timestamp": "2026-10-16T09:00:26.907196Z"}]}