{"vulnerability": "cve-2026-1239", "sightings": [{"uuid": "9f3a4e6e-f61b-40c1-965a-d3019d6bc3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12398", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mog67nrzov2c", "content": "\ud83d\udfe0 CVE-2026-12398 - High (7.5)\n\nA command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12398/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T16:00:39.154855Z"}, {"uuid": "238d6c8c-8ebd-42c3-86d4-a7a007faf24a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-12390", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-02", "content": "", "creation_timestamp": "2026-06-18T05:00:00.000000Z"}, {"uuid": "c693b380-7b1d-4b2d-be94-a2ca2916478e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3molqnbrciv2i", "content": "CVE-2026-12390 - Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory\nCVE ID : CVE-2026-12390\n \n Published : June 18, 2026, 6:30 p.m. | 2\u00a0hours, 38\u00a0minutes ago\n \n Description : In AzeoTech DAQFactory versions 21.1 and prior, a Type Confusion vul...", "creation_timestamp": "2026-06-18T21:13:41.319029Z"}, {"uuid": "e5cbeef0-c81f-4a9f-8c55-6ef607fb1453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpbaloxhgt2q", "content": "CVE-2026-12399 - Gutenverse\nCVE ID : CVE-2026-12399\n \n Published : June 27, 2026, 6:50 a.m. | 2\u00a0hours, 54\u00a0minutes ago\n \n Description : The Gutenverse \u2013 WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin ...", "creation_timestamp": "2026-06-27T10:25:02.284721Z"}, {"uuid": "bc053091-71d7-44b2-aaf4-9b3e16632696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12399", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpbu7ixrta2m", "content": "CVE-2026-12399 gutenverse (CVSS Score 4.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-27T16:16:08.366941Z"}, {"uuid": "029057ee-b0af-473d-aec6-ddcc8132b176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1239", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mplig3lr5o27", "content": "CVE-2026-1239 - Missing Authorization in Ninja Forms plugin for WordPress. Unauthenticated access to form submissions, potentially exposing sensitive data. CVSS 7.5. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-1239/", "creation_timestamp": "2026-07-01T12:11:45.328513Z"}, {"uuid": "26ab9247-9b9e-48b6-8a0d-860286a81c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12397", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6ostdds2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12397 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Job Portal: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0694E057-7C2C-4FC2-BC72-C3E69140ACD0", "creation_timestamp": "2026-07-13T07:37:29.051337Z"}, {"uuid": "0da3d798-2399-45a0-81ce-912b740602e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12396", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6xam3rs2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12396 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Job Portal: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1EAC575E-34FC-48AE-A44B-ECF331AA7BAE", "creation_timestamp": "2026-07-13T07:42:12.193332Z"}, {"uuid": "cd9dd930-8081-4fe1-bc89-adf72031a1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12396", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqklk2ngxy26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12396 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Job Portal: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D4CD6FD9-ED13-4441-887C-426DDD6BA6EE", "creation_timestamp": "2026-07-13T21:00:07.967907Z"}, {"uuid": "4e9bfeb3-9e6b-42b2-8250-a7d33dd90ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12396", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlachztqa2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12396 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Job Portal: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DCF6826A-910B-460F-8C5C-9194DBD08102", "creation_timestamp": "2026-07-14T03:11:42.322235Z"}, {"uuid": "3949607d-d2c7-4418-91f5-d99a8871a25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqsfnohs22", "content": "CVE-2026-12395 - WP Job Portal\nCVE ID : CVE-2026-12395\n \n Published : July 16, 2026, 7:16 a.m. | 18\u00a0minutes ago\n \n Description : The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authentic...", "creation_timestamp": "2026-07-16T07:50:15.640854Z"}, {"uuid": "a8c62544-e503-4b3a-b169-ae9255e0cc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12391", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqrgiqg5c22e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-12391](https://ubuntu.com/security/CVE-2026-12391)\nAn insecure symlink following vulner...\nhttps://ubuntu.com/security/CVE-2026-12391 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-16T14:18:33.167305Z"}, {"uuid": "98aa64b2-46b5-4830-95dc-47ef28a833fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqtd3hngxz2u", "content": "CVE-2026-12393 - WPS Bookings for WooCommerce\nCVE ID : CVE-2026-12393\n \n Published : July 17, 2026, 7:16 a.m. | 20\u00a0minutes ago\n \n Description : The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user b...", "creation_timestamp": "2026-07-17T08:22:47.011252Z"}, {"uuid": "e4293066-8b1e-4925-ac01-d7ccb66d631d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12394", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnf7mmhgz24", "content": "CVE-2026-12394\nThe MemberGlut plugin for WordPress has a security issue that allows anyone to create an account with any level of access, including administrator. This could allow unauthorized users to take control of your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T17:10:06.031288Z"}]}