{"vulnerability": "cve-2026-1534", "sightings": [{"uuid": "da2df05a-70a3-42a2-9445-9b2733dc03ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15341", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097288379770973", "content": "CVE-2026-15341: CRITICAL auth bypass in rafasashi User Session Synchronizer \u22641.4.0. Attackers can impersonate any WP user \u2014 including admins. Disable plugin until fix is released. \ud83d\udd13 https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e5e90d3fb #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-08-15T03:00:23.988997Z"}, {"uuid": "070bf433-fcf8-403f-b788-0926948a86b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15341", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3olr7vcm2a", "content": "CRITICAL: rafasashi User Session Synchronizer \u22641.4.0 has an auth bypass flaw (CVE-2026-15341). Attackers can impersonate any user \u2014 including admins. Disable plugin ASAP. https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e...", "creation_timestamp": "2026-08-15T03:00:25.780239Z"}, {"uuid": "e19fdd0f-a61b-4df2-86f9-83bde89661b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt3povhrl72e", "content": "CVE-2026-15341 - user session synchronizer\nAn attacker can gain full access to any WordPress account, including administrator accounts, without needing a password. This is possible due to a flaw in the User Session\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rafasashi #CVE #infosec", "creation_timestamp": "2026-08-15T03:20:04.216294Z"}, {"uuid": "1da43064-a20b-485d-a6f3-5c41ff391584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt3rxckbjq2z", "content": "WordPress Admins Borrowed Without Consent, Security Team Still Filling Forms\nPANIC 84% | Lag 0.0h | CVE-2026-15341 affects WordPress User Session Synchronizer up to 1.4.0 and allows unauthenticated ac\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-15T04:00:33.999080Z"}, {"uuid": "be378c2f-a6b7-4a24-b570-c1989d9596eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dsvweyrngxjsj", "content": "CVE-2026-15341 - User Session Synchronizer\nCVE ID : CVE-2026-15341\n \n Published : Aug. 15, 2026, 3:16 a.m. | 56\u00a0minutes ago\n \n Description : The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up...", "creation_timestamp": "2026-08-15T04:45:26.792893Z"}, {"uuid": "a7768d0b-698b-4c42-b5c4-7ff4097f84ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15343", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquh5izcym2b", "content": "CVE-2026-15343 - Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths\nCVE ID : CVE-2026-15343\n \n Published : July 17, 2026, 4:17 p.m...", "creation_timestamp": "2026-07-17T19:08:09.178502Z"}, {"uuid": "dcd1c1d5-c52c-4922-9e40-63ebb3d01efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15342", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrmxig5vep2y", "content": "CERT/CC warns of a Plane authorization bypass, CVE-2026-15342. It lets users reach other workspaces' files, and no patch exists yet.\n\n#Plane #CVE202615342 #AuthorizationBypass #MultiTenant #CERTCC #Vulnerability #Cybersecurity", "creation_timestamp": "2026-07-27T13:04:29.421940Z"}, {"uuid": "98420ca3-dea3-44c5-834e-ed6a528589b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-15344", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15344", "content": "", "creation_timestamp": "2026-07-29T08:15:08.859417Z"}]}