{"vulnerability": "cve-2026-5714", "sightings": [{"uuid": "4cd85eeb-9852-4ff4-95d4-d7694c152869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5714", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mnufr2tffa2t", "content": "CVE-2026-5714: XSS Stored en Enable Media Replace\n\nCVE-2026-5714 en Enable Media Replace: Stored XSS que afecta 600k+ sitios hasta v4.1.8. Cualquier Autor puede inyectar scripts. \u00bfYa actualizaste a 4.1.9?\n\n#cve20265714 #enablemediareplace #storedxss #pluginsvulnerables #wordpressseguridad", "creation_timestamp": "2026-06-09T14:27:43.386577Z"}, {"uuid": "505d1742-dab8-4d77-b6e9-8542bdaf53cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5714", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnyynlbxdh2f", "content": "CVE-2026-5714 enable-media-replace (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #enable-media-replace", "creation_timestamp": "2026-06-11T10:16:26.177052Z"}, {"uuid": "ac0fa5c1-36b0-4298-8937-7b7cbb526b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57149", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpk7teoycm2k", "content": "A critical Plone RCE vulnerability (CVE-2026-57149, CVSS 9.9) allows TALES injection via the Classic portlet. Two more flaws enable DoS and SSRF.\n\n#Plone #RCE #CyberSecurity #CMS #PatchNow", "creation_timestamp": "2026-07-01T00:05:24.579071Z"}, {"uuid": "c080f3bc-0188-4546-9a4a-759356962917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57146", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-jxcw-qp4h-6jfq", "content": "", "creation_timestamp": "2026-07-20T22:35:36.798466Z"}, {"uuid": "a6a1b0ed-f9df-485a-9df9-8bf7b30dbb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57148", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f38v-77qj-h4jq", "content": "", "creation_timestamp": "2026-07-20T22:35:41.182676Z"}, {"uuid": "e57121a4-86de-423a-a271-5d6af34215b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57147", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cwj8-7gp2-ggcw", "content": "", "creation_timestamp": "2026-07-20T22:35:44.236846Z"}, {"uuid": "8ba0e1bc-601f-45e8-a30d-bd9c2f1a489a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57145", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47", "content": "", "creation_timestamp": "2026-07-20T22:35:46.529097Z"}, {"uuid": "69e280ce-1c17-4ac2-b7ec-356f2d2ef2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57144", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6jcq-6546-qrrw", "content": "", "creation_timestamp": "2026-07-20T22:35:48.856470Z"}, {"uuid": "9a77044f-a301-41ef-878f-5ddc04057acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57142", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7qw2-w5rc-37x2", "content": "", "creation_timestamp": "2026-07-20T22:35:51.036964Z"}, {"uuid": "1f1f6cf9-ea1a-4714-a234-9b837b1e53ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57141", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p69m-4f92-2v84", "content": "", "creation_timestamp": "2026-07-20T22:35:55.451475Z"}, {"uuid": "00d2ce0c-6d8b-4347-a88a-49bb62360bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57140", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9752-mhqh-h34f", "content": "", "creation_timestamp": "2026-07-20T22:35:59.845185Z"}, {"uuid": "ba14c1a0-975d-4480-b88b-51a97f8bc0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57143", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf", "content": "", "creation_timestamp": "2026-07-20T22:37:53.727922Z"}, {"uuid": "c106b2e6-46ad-4b81-8dc9-86fb8a152642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57145", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u", "content": "CVE-2026-57145 - praisonai\nThe PraisonAI multiedit tool allows attackers to read sensitive files and overwrite arbitrary files on the system. This is because the tool does not check file paths for safety,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "creation_timestamp": "2026-07-23T17:02:04.889917Z"}, {"uuid": "bb5e13f1-ca69-4624-b4c8-46201c8925f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57148", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz5u56b2v", "content": "CVE-2026-57148 - praisonai-platform\nThe praisonai-platform software uses a default secret key for signing and verifying session tokens, which can be easily guessed by an attacker. This means that any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #pip #CVE #infosec", "creation_timestamp": "2026-07-23T17:04:04.298154Z"}, {"uuid": "682aa5f0-2047-4f75-a48a-7d660bb4a095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57147", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz77dbd2q", "content": "CVE-2026-57147 - praisonai-platform\nThe PraisonAI Platform uses a default secret for generating tokens, which can be exploited by attackers. This vulnerability allows them to create fake tokens,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #pip #CVE #infosec", "creation_timestamp": "2026-07-23T17:04:05.746543Z"}]}