{"vulnerability": "cve-2026-6320", "sightings": [{"uuid": "0a09c180-0075-45f7-a997-96920a6705d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6320", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml7ueytuar2s", "content": "CVE-2026-6320 salon-booking-system (CVSS Score 7.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T23:33:06.734620Z"}, {"uuid": "b5498933-327d-41e4-ac80-b3c4055da708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6320", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxp2nngcj25", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-6320 Salon Booking System \u2013 Free\u00a0Version\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001WordPress\u7528\u306eSalon Booking System \u2013 Free Version\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u5b58\u5728\u3057\u3001\u30d0\u30fc\u30b8\u30e7\u30f310.30.25\u307e\u3067\u306e\u3082\u306e\u304c\u5f71\u97ff\u3092\u53d7\u3051\u307e\u3059\u3002", "creation_timestamp": "2026-05-16T11:02:07.171705Z"}, {"uuid": "2e19424a-9279-49b3-8f0e-1fa3da95ffa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63202", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty-incubator-codec-ohttp/security/advisories/GHSA-4899-mpch-38p3", "content": "", "creation_timestamp": "2026-08-20T20:35:03.770825Z"}, {"uuid": "49cb7478-eb3b-4775-a9ab-ee9fd70dc6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6320", "type": "seen", "source": "https://t.me/shimiscyberworld/1126", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-6320 \u2014 CVSS 7.5\nWordPress Salon Booking Plugin: Arbitrary File Read via Email Attachments\n\nCVE-2026-6320 \u2014 The Salon Booking System \u2013 Free Version plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 10.30.25. This is due to the public booking flow accepting\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #arbitrary_file_access\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-6320 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:19.909682Z"}, {"uuid": "c825f723-106e-4840-ba90-5ccd2fa7144a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63203", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbpklcl3325", "content": "\ud83d\udfe0 CVE-2026-63203 - High (7.6)\n\nLogto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63203/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T16:49:13.022029Z"}]}