{"vulnerability": "cve-2026-12949", "sightings": [{"uuid": "0ce8d571-c4d6-4086-8208-c2c0eedad1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mszi63vvkp2y", "content": "CVE-2026-12949 - wishlist member\nA security flaw in Wishlist Member plugin for WordPress versions up to 3.34.1 allows attackers to take over any WordPress account, including administrator accounts, by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wishlistmember #CVE #infosec", "creation_timestamp": "2026-08-14T06:00:04.973946Z"}, {"uuid": "1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszyz3h5fs24", "content": "\ud83d\udd34 CVE-2026-12949 - Critical (9.8)\n\nThe Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verif...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12949/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T11:01:30.647128Z"}, {"uuid": "74313d29-f5fd-4d92-b1bb-b50b9a35f764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt24fs2nxu2p", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:02:19.079619Z"}, {"uuid": "977e3afa-2ab2-451b-ab2d-a283ce233324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117093756935891127", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:03:25.062651Z"}, {"uuid": "2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt3w6fnmex24", "content": "CVE-2026-12949 wishlist-member-x (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T05:16:07.270769Z"}]}