{"vulnerability": "cve-2026-1449", "sightings": [{"uuid": "f2bcb8a3-d811-46d6-9694-319b9e92ba93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1449", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdeuadas2b23", "content": "", "creation_timestamp": "2026-01-27T03:52:15.553642Z"}, {"uuid": "924ea341-2d41-4e04-95d5-076ac1edf5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14494", "type": "seen", "source": "Telegram/T-xcB78aWCsHLgTfXQRasNc8m6nVVN9b-vVXSIdveCeZ8gWr", "content": "", "creation_timestamp": "2026-08-29T16:00:04.955280Z"}, {"uuid": "527a4e22-0cc6-4ec2-8d72-40337a3d06eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14494", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muaczdqx622j", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cSigma Forms Pro\u300d\u306e\u8106\u5f31\u6027\u3002\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u6642\u306eMIME\u30bf\u30a4\u30d7\u691c\u8a3c\u4e0d\u5099\u306b\u3088\u308a\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u3002\nCVE-2026-14494 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-29T16:41:46.377990Z"}, {"uuid": "73499222-fbec-4f69-9ca6-85a406fc3ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14494", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muatosllzo2e", "content": "CVE-2026-14494 - sigmaforms pro \u2013 ai generated forms\nThe Sigma Forms Pro add\u2011on for WordPress lets anyone on the internet send a file through its form fields, and the file can be placed on your server and executed\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bdthemes #CVE #infosec", "creation_timestamp": "2026-08-29T21:40:06.854876Z"}, {"uuid": "77975561-3949-4a20-947d-12b049112c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14498", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtaoo6jumm2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 40 interactions\nCVE-2026-59310: 37 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-33696: 5 interactions\nCVE-2026-17581: 3 interactions\nCVE-2026-14498: 2 interactions\n", "creation_timestamp": "2026-08-17T02:45:06.047988Z"}, {"uuid": "6e04febc-99a0-420d-8272-6ae34a755657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14498", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mtbla2pv5i2k", "content": "CVE-2026-14498 query-wrangler (CVSS Score 8.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-17T11:16:10.270608Z"}, {"uuid": "880427c2-fc4c-4525-be3e-82821b82f93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14494", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2mkzqg2ddocgr", "content": "CVE-2026-14494 - Sigma Forms Pro\nCVE ID : CVE-2026-14494\n \n Published : Aug. 29, 2026, 11:30 a.m. | 31\u00a0minutes ago\n \n Description : The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_s...", "creation_timestamp": "2026-08-29T12:16:38.271057Z"}, {"uuid": "0d0a8cd8-6b8b-40d7-aa53-f96f0b3b8d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14494", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu7wnhhbck26", "content": "\ud83d\udd34 CVE-2026-14494 - Critical (9.8)\n\nThe Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-14494/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T13:00:23.324819Z"}, {"uuid": "624e92e1-1b25-4704-9213-6cd46b988444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14495", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq4psgrlep2i", "content": "CVE-2026-14495 - DoLogin Security\nCVE ID : CVE-2026-14495\n \n Published : July 8, 2026, 6:16 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : The DoLogin Security plugin for WordPress is vulnerable to Authentication Bypass via Insufficient Randomness in all versions up to, and in...", "creation_timestamp": "2026-07-08T08:39:07.846645Z"}, {"uuid": "d8668906-d9f2-494e-946f-4faa89d375d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14495", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mq6dcev5hs2p", "content": "CVE-2026-14495. DoLogin Security's auth randomness is broken. Attackers bypass login entirely. CVSS 8.8. Update to 4.3 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-07-09T00:00:43.309608Z"}, {"uuid": "7949b971-80cf-4d1b-add5-2d8ace96e904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14498", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j6qammc22", "content": "\ud83d\udfe0 CVE-2026-14498 - High (8.8)\n\nThe Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-14498/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-16T06:01:39.201374Z"}, {"uuid": "309d87f8-dfb2-438a-9e05-96a3ca0fa5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14499", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquqpmiqc62q", "content": "CVE-2026-14499 - Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints\nCVE ID : CVE-2026-14499\n \n Published : July 17, 2026, 8:17 p.m. | 17\u00a0minutes a...", "creation_timestamp": "2026-07-17T21:59:20.502816Z"}, {"uuid": "c0470763-57f9-4816-a091-e19e2f25168d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14499", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwx6ili462d", "content": "\ud83d\udfe0 CVE-2026-14499 - High (8.8)\n\nIBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-14499/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T19:00:22.441561Z"}, {"uuid": "657ac5e8-4508-42eb-9d4c-d5365d89c3a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14499", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr5mhetzwz2m", "content": "\ud83d\udccc CVE-2026-14499 - IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system ... https://www.cyberhub.blog/cves/CVE-2026-14499", "creation_timestamp": "2026-07-21T10:37:07.862470Z"}, {"uuid": "83e3b7b8-6dfe-4d73-b098-05566711e9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mroxhfbgzj24", "content": "CVE-2026-14490 - Demi\nCVE ID : CVE-2026-14490\n \n Published : July 28, 2026, 5:39 a.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : The Demi \u2013 One Click Demo Import, WP Backup & Site Migration plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions u...", "creation_timestamp": "2026-07-28T08:09:13.897858Z"}, {"uuid": "81fd34a3-fdd5-42f1-94e7-398754f93691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14494", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mua2etbpfi2e", "content": "\ud83d\udea8 CVE-2026-14494 \u2014 CVSS 9.8 CRITICAL\n\nThe Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-14494\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T14:07:07.986312Z"}, {"uuid": "cba2f979-2a0a-4fa5-8aee-1c29b4e9808d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14494", "type": "published-proof-of-concept", "source": "Telegram/T-xcB78aWCsHLgTfXQRasNc8m6nVVN9b-vVXSIdveCeZ8gWr", "content": "", "creation_timestamp": "2026-08-30T00:00:54.922940Z"}]}