{"vulnerability": "cve-2026-1988", "sightings": [{"uuid": "8a408c33-a103-4634-aa42-c6b4fa4b750f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1988", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116068517992447814", "content": "", "creation_timestamp": "2026-02-14T10:30:33.635877Z"}, {"uuid": "f8659cda-b0de-4fd8-8d53-fce7ce45ab23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1988", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3messv5sdeb2h", "content": "", "creation_timestamp": "2026-02-14T10:30:35.430404Z"}, {"uuid": "bbb5a4d1-2c00-43f7-8891-8dd570d2d644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1988", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mesi63vgu72g", "content": "", "creation_timestamp": "2026-02-14T07:18:44.112984Z"}, {"uuid": "049e5a0e-efe1-4dab-a8a6-9df9ad533449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtnek7zciz2h", "content": "WPeMatico RSS Feed Fetcher\uff08v2.8.24\u307e\u3067\uff09\u306f\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u304c\u3001\u30b5\u30a4\u30c8\u8a2d\u5b9a\u3092\u6539\u3056\u3093\u3057\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19883 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-22T03:48:32.460034Z"}, {"uuid": "b35dc533-762a-41da-b60f-80487e5dc38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnf6vth7x27", "content": "\ud83d\udfe0 CVE-2026-19883 - High (8.8)\n\nThe WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19883/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T04:00:12.603788Z"}, {"uuid": "80e028dd-ab33-45da-aba6-1670e8984363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt2jtuj4xd2p", "content": "Opening a booby-trapped code repository can run an attacker's commands in editors built on Eclipse Theia (the framework under Arduino IDE 2.x and other tools).\n\nA crafted git config runs on folder open, no trust prompt. CVE-2026-19884, CVSS 8.4.\n\nFix: update to Theia 1.70.0.", "creation_timestamp": "2026-08-14T16:02:49.077193Z"}, {"uuid": "68205e77-4273-4d44-a633-55420863c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2l5gf2j3lvsj3", "content": "CVE-2026-19884 - Eclipse Theia Git Extension Arbitrary Command Execution Vulnerability\nCVE ID : CVE-2026-19884\n \n Published : Aug. 14, 2026, 3:32 p.m. | 40\u00a0minutes ago\n \n Description : In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control...", "creation_timestamp": "2026-08-14T16:27:12.658930Z"}, {"uuid": "5e94c469-da48-4bca-b6bf-25864c9d7ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://gist.github.com/ichintu/949a60d8b386934bcc70d3af45608090", "content": "**CVE-2026-19883 \u2013 WPeMatico RSS Feed Fetcher (\u2264\u202f2.8.24)**  \n- **Flaw:** Unchecked capability in `wpematico_import_settings` lets any authenticated user (Subscriber+) change any plugin option.  \n- **Impact:** An attacker can alter critical settings\u2014e.g., set default user role to Administrator or enable registration\u2014to gain administrative access.  \n- **Severity:** 8.8 (High)  \n- **Published:** Aug\u202f22\u202f2026, 3:16\u202fa.m.", "creation_timestamp": "2026-08-22T08:01:31.137319Z"}, {"uuid": "b2b5d014-35fd-40d9-9992-830bae293882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtpnynetzn2m", "content": "CVE-2026-19883: fallo en WPeMatico escala a admin\n\n\u00bfUs\u00e1s WPeMatico en WordPress? El CVE-2026-19883 deja que un suscriptor tome control admin de tu sitio. Cheque\u00e1 tu versi\u00f3n y protejete hoy mismo.\n\n#cve202619883 #wpematico #vulnerabilidadwordpress #escaladadeprivilegios #seguridadwordpress", "creation_timestamp": "2026-08-23T01:42:59.105050Z"}]}