{"vulnerability": "cve-2026-1258", "sightings": [{"uuid": "c9f89986-001e-4f48-9bd7-7b6716dc2a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12581", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116793647291083340", "content": "CVE-2026-12581 (HIGH): Digiwin EasyFlow .NET is exposed to session fixation \u2014 attackers can hijack user sessions after login. No patch yet; apply session controls & monitor activity. Details: https://radar.offseq.com/threat/cve-2026-12581-cwe-384-session-fixation-in-digiwin-3cbe5111cc31a62c #OffSeq #vulnerability #infosec #security", "creation_timestamp": "2026-06-22T12:00:30.928835Z"}, {"uuid": "7fbcfdd7-4a52-4f9e-ba6b-a30bd3cae54c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12581", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moutlrvs7i2t", "content": "Session fixation vulnerability (HIGH) in Digiwin EasyFlow .NET lets remote attackers hijack user sessions. No patch yet \u2014 review session management, monitor activity. Details: https://radar.offseq.com/threat/cve-2026-12581-cwe-384-session-fixation-in-digiwin-3cbe5111cc31a62c #OffSeq #security #vuln", "creation_timestamp": "2026-06-22T12:00:33.874700Z"}, {"uuid": "da0b756e-440f-41ce-956c-7687b1182665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12580", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mouujtdzm622", "content": "CVE-2026-12580 - Digiwin\uff5cEasyFlow .NET - Stored Cross-Site Scripting\nCVE ID : CVE-2026-12580\n \n Published : June 22, 2026, 9:26 a.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : EasyFlow .NET developed by Digiwin has a Stored Cross-Site Scripting vulnerability, allowing authenti...", "creation_timestamp": "2026-06-22T12:17:18.165338Z"}, {"uuid": "94c34287-de6c-4b6e-874f-a9d322ad46a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mouveox4ap2s", "content": "CVE-2026-12581 - Digiwin\uff5cEasyFlow .NET - Session Fixation\nCVE ID : CVE-2026-12581\n \n Published : June 22, 2026, 9:30 a.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers rep...", "creation_timestamp": "2026-06-22T12:32:19.572462Z"}, {"uuid": "2f8c7d94-756d-41be-bdaf-d8a03fa461a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12582", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116911494012539173", "content": "CVE-2026-12582: HIGH severity SQL injection in Library Management System plugin v3.5 for WordPress. Unauthenticated attackers can extract sensitive DB data. No official fix yet \u2014 restrict use & monitor logs. https://radar.offseq.com/threat/cve-2026-12582-cwe-89-sql-injection-in-library-man-58d0848d2e854832 #OffSeq #WordPress #Infosec", "creation_timestamp": "2026-07-13T07:30:26.837230Z"}, {"uuid": "539b9cf8-d7a1-4670-a751-49889a9f3940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12582", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqj6cbiqal2d", "content": "SQL injection (CVE-2026-12582) in Library Management System plugin v3.5 (HIGH) lets unauthenticated attackers steal sensitive data. Restrict plugin use & watch for suspicious activity. https://radar.offseq.com/threat/cve-2026-12582-cwe-89-sql-injection-in-library-man-58d0848d2e854832 #OffSeq #Wor...", "creation_timestamp": "2026-07-13T07:30:28.848452Z"}, {"uuid": "e539f9c5-67c3-4eaa-bdba-de298bba6eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12582", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6pwb4zr22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12582 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Library Management System \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F55727B7-0C8A-4A5B-9BD3-C8D557E02AA6", "creation_timestamp": "2026-07-13T07:38:06.488378Z"}, {"uuid": "af3c061e-bbda-48bc-ac7b-4c7b951d7d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12582", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqkvlzkiil22", "content": "CVE-2026-12582. CVSS 8.6. Library Management System plugin leaks password hashes and database credentials via SQL injection. No auth needed. Any visitor executes it. No patch available \u2014 disable the plugin now. Scan your WordPress site: pulse-wp.com\n#WordPress #SQLi #CyberSecurity", "creation_timestamp": "2026-07-14T00:00:12.795592Z"}, {"uuid": "b8ec84d5-d36a-49bd-9d82-38d1ce8361d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12582", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlalbf6pv26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12582 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Library Management System \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5B03882E-1602-4687-BC5E-9004D5760E4C", "creation_timestamp": "2026-07-14T03:16:37.157310Z"}, {"uuid": "b67a9d2e-24ca-43c2-97e0-70bee1add4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12583", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116917156404370712", "content": "Deserialization of untrusted data (CVE-2026-12583, CRITICAL) in Newsletters WP plugin <4.15 allows unauthenticated RCE via public form. Disable or restrict plugin until patch is confirmed. https://radar.offseq.com/threat/cve-2026-12583-cwe-502-deserialization-of-untruste-c97ca770117c8a32 #OffSeq #WordPress #Vuln #RCE", "creation_timestamp": "2026-07-14T07:30:28.177343Z"}, {"uuid": "62d6c2ee-45bf-4044-b2ab-e91f462adbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-12583", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlora4oen23", "content": "Newsletters WP plugin <4.15 impacted by CRITICAL deserialization vuln (CVE-2026-12583). Unauthenticated attackers can achieve RCE. Restrict or disable plugin until fix. https://radar.offseq.com/threat/cve-2026-12583-cwe-502-deserialization-of-untruste-c97ca770117c8a32 #OffSeq #WordPress #Security", "creation_timestamp": "2026-07-14T07:30:30.206440Z"}, {"uuid": "b82a26d8-2f5c-4da9-a6a2-06f49570fcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqlv6rfmw42x", "content": "CVE-2026-12583 - Newsletters\nCVE ID : CVE-2026-12583\n \n Published : 14. Juli 2026 06:17 | 1\u00a0Stunde, 13\u00a0Minuten ago\n \n Description : The Newsletters WordPress plugin before 4.15 does not prevent deserialization of untrusted input that is stored through a public form, allowing u...", "creation_timestamp": "2026-07-14T09:25:26.108995Z"}, {"uuid": "8ac34df9-6fa4-488b-9ac5-04477e84cf0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12583", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqng3e6vkk2r", "content": "CVE-2026-12583. Newsletters plugin. 8.1/10.\n\nAny visitor uploads a malicious form. Your server executes their code. wp-config.php, database, API keys\u2014all compromised.\n\nNo patch available. Disable Newsletters now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #FileUpload #CyberSecurity", "creation_timestamp": "2026-07-15T00:00:33.538755Z"}, {"uuid": "9086454b-5303-42cd-9756-f3aa2f02d34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12582", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqqwhvpfb23", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05e1\u05d9\u05e1\u05d8\u05de\u05ea \u05e0\u05d9\u05d4\u05d5\u05dc \u05e1\u05e4\u05e8\u05d9\u05d5\u05ea WordPress - CVE-2026-12582\n\n\n\nhttps://khesef.xyz/posts/36B0964D-92B7-45A1-A83F-62518897336F", "creation_timestamp": "2026-07-16T07:52:31.648760Z"}, {"uuid": "b2bb7446-ca73-40fe-a2d7-005d64217ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqrvjhdwk2m", "content": "CVE-2026-12585 - Abandoned Cart Lite for WooCommerce\nCVE ID : CVE-2026-12585\n \n Published : July 16, 2026, 7:16 a.m. | 18\u00a0minutes ago\n \n Description : The Abandoned Cart Lite for WooCommerce WordPress plugin before 6.8.2 does not protect the integrity of its cart-recovery toke...", "creation_timestamp": "2026-07-16T08:09:53.231495Z"}, {"uuid": "26f1dd13-187a-4885-a13d-d1bfb75515dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12582", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqshsud4z2i", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05e0\u05d9\u05d4\u05d5\u05dc \u05e1\u05e4\u05e8\u05d9\u05d5\u05ea WordPress - CVE-2026-12582\n\n\n\nhttps://khesef.xyz/posts/5D1E5441-D9A9-465B-BB37-064944E6B03A", "creation_timestamp": "2026-07-16T08:20:07.221249Z"}, {"uuid": "1275b546-3a9f-4a47-bf46-1059f3f96099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12583", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzos5z5uz27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12583 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Newsletters \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 PHP-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/975536CF-8802-4E30-B89D-8D446AF0B987", "creation_timestamp": "2026-07-19T21:08:17.215030Z"}, {"uuid": "655420cc-2e88-44f6-8ba3-93cfe8ac4eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12588", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gt6mvbk2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12588 \u0432 FireEye HX: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5DF73F21-1FB3-4B57-9005-59F2CC170B0D", "creation_timestamp": "2026-07-21T08:56:20.456459Z"}, {"uuid": "f3dd900c-2e29-4c07-82ef-33a257e059d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12588", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr5gtcmhly23", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea FireEye HX: CVE-2026-12588 - \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/CB8B170C-2217-49A9-960F-821B4D12BDBB", "creation_timestamp": "2026-07-21T08:56:24.636992Z"}]}