{"vulnerability": "cve-2026-1156", "sightings": [{"uuid": "fb58add7-7cfd-4319-934f-67040e3fb61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1156", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcrvbl5jv52w", "content": "", "creation_timestamp": "2026-01-19T14:50:17.206795Z"}, {"uuid": "4fbcd6ea-ca57-44d2-b010-0fb8e2182d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1156", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcs7fsm5my2k", "content": "", "creation_timestamp": "2026-01-19T17:51:35.663299Z"}, {"uuid": "ec2e2b4d-5f07-4f3b-8ff9-f5d852136514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11569", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnrq5vv63p23", "content": "CVE-2026-11569 - Quay: quay: stored xss via filedrop svg upload\nCVE ID : CVE-2026-11569\n \n Published : June 8, 2026, 12:16 p.m. | 16\u00a0minutes ago\n \n Description : A flaw was found in Quay. The filedrop endpoint accepts any mime type without validation, allowing an authenticated...", "creation_timestamp": "2026-06-08T12:55:52.439385Z"}, {"uuid": "5f135046-4e0c-4be1-a00e-0a98ab4be39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11561", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnzftyxy5k2a", "content": "CVE-2026-11561 - SSTI in Soagen Informatics' Apinizer\nCVE ID : CVE-2026-11561\n \n Published : June 11, 2026, 12:28 p.m. | 51\u00a0minutes ago\n \n Description : Improper neutralization of special elements used in an expression language statement ('expression language injection') vulne...", "creation_timestamp": "2026-06-11T14:12:40.430352Z"}, {"uuid": "27c492a2-5446-4801-892e-5a5ab9fd9ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11561", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvkrzl6323", "content": "\ud83d\udea8  ALERT: CVE-2026-11561\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nImproper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software and Consulting Inc. Apinizer allows Code Injection.\n\nThis issue affect", "creation_timestamp": "2026-06-14T23:15:08.762888Z"}, {"uuid": "a644733b-211e-4aac-a75d-57b9b5324dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplau54uab2k", "content": "CVE-2026-11562 - WS Form LITE\nCVE ID : CVE-2026-11562\n \n Published : 1 Jul 2026, 6 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : The WS Form LITE WordPress plugin before 1.11.8 does not have a capability check on one of its settings-update actions, allowing authenticated user...", "creation_timestamp": "2026-07-01T09:56:23.085406Z"}, {"uuid": "c8af3891-a4c3-4f57-8288-71cac152462d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11568", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplcipx3vb27", "content": "CVE-2026-11568 - Product Configurator for WooCommerce\nCVE ID : CVE-2026-11568\n \n Published : 1 Jul 2026, 6 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : The Product Configurator for WooCommerce WordPress plugin before 1.7.3 does not perform any authorisation or post-status ch...", "creation_timestamp": "2026-07-01T10:25:48.099542Z"}, {"uuid": "637b0197-fc35-4c02-859d-cd23ded55947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11568", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgwjyfwx23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11568 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Product Configurator \u0434\u043b\u044f WooCommerce: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B9B3DCDD-5668-4B9F-8285-10B3E66C62A5", "creation_timestamp": "2026-07-01T11:45:06.030524Z"}, {"uuid": "a32a9b0b-d1ec-4285-8654-fe530cf4e9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11564", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprixk4pnm2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11564 \u0432 libcurl: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E560F322-AB7B-47FA-9B52-E2247599C905", "creation_timestamp": "2026-07-03T21:37:25.602095Z"}, {"uuid": "8c99ccad-32db-4a10-b769-66d91239ca6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11564", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mpzch7sg2t2o", "content": "Critical CVE landed today in libcurl:\n\nCVE-2026-11564. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can con\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-11564", "creation_timestamp": "2026-07-07T00:02:13.391949Z"}, {"uuid": "a37ff8f4-c592-4c52-8714-b4c7f4de854f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11561", "type": "seen", "source": "https://t.me/GithubRedTeam/89914", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-11561\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a alperenkesk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 06:17:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclei template for CVE-2026-11561 \u2014 Apinizer SSTI / RCE version detection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.134543Z"}, {"uuid": "dabb3269-eca2-4db9-937d-c06ad5144f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11561", "type": "seen", "source": "https://t.me/GithubRedTeam/89914", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-11561\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a alperenkesk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 06:17:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclei template for CVE-2026-11561 \u2014 Apinizer SSTI / RCE version detection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:37.993101Z"}, {"uuid": "01c59550-6109-431c-afe6-5b383ed8a73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11567", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqllwpvip62s", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-11567](https://wpscan.com/vulnerability/bd738da7-f950-4da9-bcc1-c1fe845d7faa/)\nThe Sure...\nhttps://wpscan.com/vulnerability/bd738da7-f950-4da9-bcc1-c1fe845d7faa/ #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-14T06:39:52.642370Z"}, {"uuid": "e5ed065e-edee-4dbb-b2be-13dde553e8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11567", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqlv2n25xx27", "content": "CVE-2026-11567 - SureForms\nCVE ID : CVE-2026-11567\n \n Published : 14. Juli 2026 06:16 | 1\u00a0Stunde, 13\u00a0Minuten ago\n \n Description : The SureForms WordPress plugin before 2.11.1 does not properly validate the payment amount on forms that use a dynamically-sourced (variable/hidden...", "creation_timestamp": "2026-07-14T09:23:08.068531Z"}, {"uuid": "c2843b55-8d94-4a30-861c-ca04d437867c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqlvi56bjx2l", "content": "CVE-2026-11563 - Word Count and Social Shares\nCVE ID : CVE-2026-11563\n \n Published : 14. Juli 2026 06:16 | 1\u00a0Stunde, 13\u00a0Minuten ago\n \n Description : The Word Count and Social Shares WordPress plugin through 1.0 does not validate a user-supplied file path before deletion, nor d...", "creation_timestamp": "2026-07-14T09:30:41.113115Z"}, {"uuid": "6b55678b-130c-432b-b138-5721a7e73fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11563", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmdnci5jv2r", "content": "CVE-2026-11563 - word count and social shares\nThe Word Count and Social Shares WordPress plugin, used by sites with subscriber-level users, allows these users to delete any files on the server. This could be used to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-07-14T13:44:06.587272Z"}, {"uuid": "b16257c8-229e-46d3-8a05-16cb2259bb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11563", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqmrx5mbf72r", "content": "CVE-2026-11563. CVSS 9.6. Word Count and Social Shares plugin lets any Subscriber delete arbitrary files. wp-config.php gone. Database exposed. Full takeover. No patch available. Disable it now. Scan your WordPress site: pulse-wp.com\n#WordPress #CSRF #CyberSecurity", "creation_timestamp": "2026-07-14T18:00:09.572014Z"}, {"uuid": "9ea97f78-fca0-4a03-9f82-ba7c215535cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11561", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89914", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-11561\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a alperenkesk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-21 06:17:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclei template for CVE-2026-11561 \u2014 Apinizer SSTI / RCE version detection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.530236Z"}, {"uuid": "4217b238-a752-4669-97e6-9fee0a156e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11567", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzowru7f62o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11567 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SureForms: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u0441\u0430\u0439\u0442 \u043e\u0442 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0441 \u043f\u043b\u0430\u0442\u0435\u0436\u0430\u043c\u0438\n\n\n\nhttps://kripta.biz/posts/957D2F4E-C5A0-4553-A32B-2D739F12926F", "creation_timestamp": "2026-07-19T21:10:52.334036Z"}, {"uuid": "5534f73b-7c9d-4164-abb6-7f575746c5d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11563", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzpseijqo2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11563: \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 Path Traversal \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress\n\n\n\nhttps://kripta.biz/posts/B2498F48-BB80-4CFE-93D6-16BB97479398", "creation_timestamp": "2026-07-19T21:26:17.811384Z"}, {"uuid": "c23ccb44-287e-4058-9d5b-5519b5b0d7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11563", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqzpsm672y2y", "content": "WordPress \u63d2\u4ef6\u6f0f\u6d1e\u5206\u6790:CVE-2026-11563 \u4efb\u610f\u6587\u4ef6\u5220\u9664\u6f0f\u6d1e\u53ca\u5b89\u5168\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/7FC0812A-BCCF-407E-B355-4F0F3BDD75CC", "creation_timestamp": "2026-07-19T21:26:25.762474Z"}]}