{"vulnerability": "cve-2026-1545", "sightings": [{"uuid": "905e9649-14c1-4ac8-a612-1ff83e3beeb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1545", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjhm54vwi2n", "content": "", "creation_timestamp": "2026-01-28T23:49:31.975907Z"}, {"uuid": "3e66b28b-d701-434c-b6b1-0309386ed378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15450", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcwxodbd2z", "content": "\ud83d\udfe0 CVE-2026-15450 - High (8.1)\n\nThe Nex Forms \u2013 Ultimate Form Builder \u2013 Lite plugin for WordPress is vulnerable to arbitrary ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15450/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T11:01:27.094040Z"}, {"uuid": "14fbaae6-111c-4697-9d87-3f070474ca4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15450", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dzh6iyuwq4bgt", "content": "CVE-2026-15450 - NEX-Forms\nCVE ID : CVE-2026-15450\n \n Published : Aug. 1, 2026, 9:16 a.m. | 25\u00a0minutes ago\n \n Description : The Nex Forms \u2013 Ultimate Form Builder \u2013 Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in versions up to, and incl...", "creation_timestamp": "2026-08-01T09:50:26.082018Z"}, {"uuid": "79b1ec7e-b0c1-4685-93ba-04adf85061d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hpglrn2nlmpgf", "content": "CVE-2026-15452 - Smash Balloon Social Photo Feed\nCVE ID : CVE-2026-15452\n \n Published : Aug. 5, 2026, 9:26 a.m. | 50\u00a0minutes ago\n \n Description : The Smash Balloon Social Photo Feed \u2013 Easy Social Feeds Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting...", "creation_timestamp": "2026-08-05T10:30:49.520521Z"}, {"uuid": "a760fb08-72ca-4566-9f22-90904866267a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15459", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msfht3a2s72a", "content": "\ud83d\udfe0 CVE-2026-15459 - High (8.1)\n\nThe WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all version...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15459/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-06T07:00:42.654454Z"}, {"uuid": "10b60c42-55d8-4980-87cd-4dc86910003f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15459", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mshbmttlqh2t", "content": "CVE-2026-15459 wpmudev-updates (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-07T00:15:08.797280Z"}, {"uuid": "915294f7-d1de-482f-b164-3b0c41c44743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15453", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt5brjrfat24", "content": "CVE-2026-15453 kivicare-clinic-management-system (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T18:16:20.534544Z"}, {"uuid": "23be86b9-2d70-474a-82f6-c2b99f039232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15453", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mt5brl46ha27", "content": "CVE-2026-15453 kivicare-clinic-management-system (CVSS Score 6.5) \n\n#WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #mashing #wpsecurity #atomicedge #potatosecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T18:16:21.233616Z"}, {"uuid": "bf5d4970-d5b1-4048-a3bf-73cd4ad07f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqszdqisv2m", "content": "CVE-2026-15458 - SEO Booster\nCVE ID : CVE-2026-15458\n \n Published : July 16, 2026, 5:16 a.m. | 2\u00a0hours, 18\u00a0minutes ago\n \n Description : The SEO Booster plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_field' parameter in all versions up to, and includi...", "creation_timestamp": "2026-07-16T08:29:55.606129Z"}, {"uuid": "634ac623-accf-49e4-8272-c33556628563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15451", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdak72smv2p", "content": "\ud83d\udfe0 CVE-2026-15451 - High (8.8)\n\nThe MemberPress Corporate Accounts plugin for WordPress is vulnerable to Privilege Escalation in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15451/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T14:00:42.337232Z"}, {"uuid": "99805dd4-8eca-4f2e-bf49-ed75fe2f588a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15451", "type": "seen", "source": "https://gist.github.com/ichintu/11d7f3c8a2e6716bcedbcab98b589bc5", "content": "**Daily Cyber Threat Intelligence Summary:**\n\n\u2022 **Rapid Compromise Scenario:** A Reddit-discussed case/demo illustrates how 11 organizations can be breached in just 26 seconds.  \n\u2022 **CVE-2026-15451 (High/8.8):** A privilege escalation vulnerability in the MemberPress Corporate Accounts WordPress plugin (\u22641.5.39) allows authenticated users to create or hijack admin accounts via unsanitized mass assignment. Partially patched in v1.5.39.  \n\u2022 **Commix Tool Update:** The automated injection testing tool now supports out-of-band (OAST) detection and exploitation, enhancing blind attack capabilities.", "creation_timestamp": "2026-09-12T16:01:52.365315Z"}]}