{"vulnerability": "cve-2026-1161", "sightings": [{"uuid": "36d087c5-edbf-484f-986f-c4ad853430da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11618", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mntluplbgk2v", "content": "DTStack Taier 1.4.0\u4ee5\u524d\u3067\u3001Source Connection Test Endpoint\u306epreHandle\u95a2\u6570\u306b\u4e0d\u9069\u5207\u306a\u8a8d\u8a3c\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-11618 CVSS 7.3 | HIGH", "creation_timestamp": "2026-06-09T06:44:28.805958Z"}, {"uuid": "486f4a80-5c4c-4db7-aff3-0c33e6b885d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11616", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mntwsov5su2y", "content": "\ud83d\udfe0 CVE-2026-11616 - High (8.8)\n\nThe Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-11616/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-09T10:00:12.242028Z"}, {"uuid": "b511d96b-aee1-4144-9b4f-9c6759bb66da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11616", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnu4efsus32t", "content": "CVE-2026-11616 - Events Calendar for GeoDirectory\nCVE ID : CVE-2026-11616\n \n Published : June 9, 2026, 9:16 a.m. | 1\u00a0hour, 59\u00a0minutes ago\n \n Description : The Events Calendar for GeoDirectory plugin for WordPress is vulnerable to Privilege Escalation in versions up to and incl...", "creation_timestamp": "2026-06-09T11:39:35.031633Z"}, {"uuid": "87bd792f-356b-4b56-bdeb-8babae6fe451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11616", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnu5jfl4gl2x", "content": "Events Calendar for GeoDirectory (CVE-2026-11616) lets unauthenticated attackers escalate to admin. CVSS 8.8. No patch available. Disable the plugin now. Scan your WordPress site: pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "creation_timestamp": "2026-06-09T12:00:16.130069Z"}, {"uuid": "fe7bf60e-4b96-4443-bbf4-373bd9f060a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11616", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnwyx3ja4y2s", "content": "CVE-2026-11616 events-for-geodirectory (CVSS Score 8.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-06-10T15:16:43.476515Z"}, {"uuid": "3e994b62-19e0-41d0-be3a-72a9b536597e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11610", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2ipuz5va24", "content": "CVE-2026-11610 - 389-ds-base: 389-ds-base: heap buffer overflow in sasl_io_recv() via padded sasl unbind\nCVE ID : CVE-2026-11610\n \n Published : July 7, 2026, 10:16 a.m. | 58\u00a0minutes ago\n \n Description : A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directo...", "creation_timestamp": "2026-07-07T11:27:06.509844Z"}, {"uuid": "dad0f42e-3463-4845-96f9-0af4a93a6687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11610", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116881740056582551", "content": "A severe vulnerability was disclosed for Red Hat 389 Directory Server (CVE-2026-11610) https://vuldb.com/vuln/376758", "creation_timestamp": "2026-07-08T01:23:42.861044Z"}, {"uuid": "9b67a72b-3262-474d-bdda-a967e7a14a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muobfmcjyk2o", "content": "CVE-2026-11613 - divi ajax filter\nThe Divi Ajax Filter add\u2011on for WordPress up to version 5.1.2 can be tricked into loading any server\u2011side script file on your site. An unauthenticated visitor could cause the site\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#diviengine #CVE #infosec", "creation_timestamp": "2026-09-04T05:50:06.814952Z"}, {"uuid": "ab2c8688-5e4a-4a59-8b24-8d3a03e98f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muocehnp2s22", "content": "\ud83d\udea8 CVE-2026-11613 \u2014 CVSS 9.8 CRITICAL\n\nThe Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-11613\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T06:07:22.834832Z"}, {"uuid": "0d24960d-1fae-4ff3-9f05-81cc57ff07d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "https://gist.github.com/shootcannon/aff5610be10c02b40d08619a795d7caf", "content": " code execution path.\n *\n * Usage (your OWN lab / authorized target \u2014 planting requires file access):\n *   1. place this file anywhere web-reachable, e.g.\n *        wp-content/uploads/wayang.php              (classic upload location)\n *        wp-content/plugins/wayang-upload/wayang.php (via plugin upload zip)\n *   2. verify inclusion through the unauthenticated LFI:\n *        python poc_http.py  --upload-rel \"wp-content/uploads/wayang.php\" --upload-marker WayangXploit-RCE-CONFIRMED\n *      or for the uploads dir simply:\n *        python poc_http.py  --upload-name wayang.php\n *\n * The trailing exit() is required: the Divi-less AJAX handler fatals AFTER the\n * include sink, which would discard this file's output.\n */\nif ( ! headers_sent() ) {\n\theader( 'Content-Type: text/plain' );\n}\necho \"WayangXploit-RCE-CONFIRMED\\n\";\necho 'uid=' . getmyuid() . ' user=' . get_current_user() . \"\\n\";\necho 'uname=' . php_uname() . \"\\n\";\necho 'sapi=' . php_sapi_name() . \"\\n\";\necho 'time=' . gmdate( 'c' ) . \"\\n\";\nexit;\n", "creation_timestamp": "2026-09-04T18:52:28.208208Z"}, {"uuid": "18beabc8-a89b-447f-9048-20921902f31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "Telegram/MInuNUaZtHgQIkWaDn-XSBNMalOeSi9Asn4ilk4cWhnEcXw", "content": "", "creation_timestamp": "2026-09-05T01:00:05.648439Z"}, {"uuid": "0fa99ed7-fb49-4700-a4e9-b5fbcd55ddef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-05T07:00:03.977344Z"}, {"uuid": "32e72ea7-8aab-440c-9ef1-0241e3e37ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "published-proof-of-concept", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-06T00:00:53.717864Z"}, {"uuid": "f84e2845-ebb5-4a92-9105-c889858528bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "published-proof-of-concept", "source": "Telegram/MInuNUaZtHgQIkWaDn-XSBNMalOeSi9Asn4ilk4cWhnEcXw", "content": "", "creation_timestamp": "2026-09-06T00:01:02.799872Z"}, {"uuid": "92f1d4ad-b4af-41be-9cd4-229ea1075e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzh7agepl2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-11613: The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the \u2026\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-11613\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T16:33:13.372458Z"}]}