{"vulnerability": "cve-2026-16610", "sightings": [{"uuid": "300f4f1d-818b-4735-b01f-0a8f84a95037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnsz3jvs2r", "content": "CVE-2026-16610 - admin and site enhancements (ase) pro\nA WordPress plugin called Admin and Site Enhancements Pro has a security flaw that allows attackers to run code on your website without needing a password. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ase #CVE #infosec", "creation_timestamp": "2026-07-30T05:00:05.234142Z"}, {"uuid": "03829c2c-210a-4c3f-b8de-2f5a84d0710f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpluu52j", "content": "Daily IT Security Digest \u2014 2026-07-30\nvendor patches immediately and review network exposure. [Source](https://securityonline.bsky.social)\n\n## 4. ASE Pro WordPress Plugin Critical RCE (CVE-2026-16610)\n\nThe ASE Pro plugin (version \u22648.9.0) for WordPress has a critical remote code execution", "creation_timestamp": "2026-07-30T05:02:09.700083Z"}, {"uuid": "6795f59a-a818-4d96-a41c-a9994925342f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpuffg2e", "content": "Daily IT Security Digest \u2014 2026-07-30\ntracked as CVE-2026-16610 (CWE-434). Unauthenticated attackers can execute arbitrary code if the `[post_cf_form]` shortcode is publicly available. The vulnerability affects a significant portion of WordPress deployments. Site owners should update to the latest", "creation_timestamp": "2026-07-30T05:02:10.175897Z"}, {"uuid": "567f5676-9ddb-43af-869e-b8e2c34844c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtr7a4afg2l", "content": "\ud83d\udd34 CVE-2026-16610 - Critical (9.8)\n\nThe Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16610/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T06:00:36.738121Z"}, {"uuid": "f5c32fd6-3da0-4f39-be30-f30b4d4e00b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16610", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrtm5z3l4c2i", "content": "CRITICAL RCE in ASE Pro WordPress plugin (\u22648.9.0): Unauthenticated attackers can run code if [post_cf_form] is public. Patch or disable now. https://radar.offseq.com/threat/cve-2026-16610-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ase-admin-and-site-9666b4d559bc4aea #OffSeq #WordP...", "creation_timestamp": "2026-07-30T04:30:27.398421Z"}]}