{"vulnerability": "cve-2026-6658", "sightings": [{"uuid": "26b17cda-e90b-47c7-8c99-939979af41f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66583", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkfcfze2m", "content": "CVE-2026-66583 - forminator\nThe Forminator add\u2011on for WordPress, in versions up through 1.57.0, can be fooled by anyone on the internet to insert harmful data that makes the website run unwanted code.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#forminator #wpmudev #CVE #infosec", "creation_timestamp": "2026-08-20T13:20:04.817521Z"}, {"uuid": "86b62130-2fe4-416d-b02e-c39835c10c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66583", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7f6rkp2t", "content": "\ud83d\udea8 CVE-2026-66583 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Forminator <= 1.57.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66583\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T14:07:36.403488Z"}, {"uuid": "6235fc1a-21f9-49fe-8daf-f023e0460f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66582", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtlwmpi4ck2o", "content": "CVE-2026-66582 - Unauthenticated XSS in TranslatePress \u22643.3.2. CVSS 7.1. No patch yet. Disable or restrict access now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66582/", "creation_timestamp": "2026-08-21T14:06:42.756357Z"}, {"uuid": "7278db94-cb49-47b0-aa92-ac62a160f6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66582", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117133882319199310", "content": "CVE-2026-66582 - Unauthenticated XSS in TranslatePress \u22643.3.2. CVSS 7.1. No patch yet. Disable or restrict access now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66582/", "creation_timestamp": "2026-08-21T14:06:44.344005Z"}, {"uuid": "1850f1ab-fa15-4399-9f2d-4d99e16dc83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66587", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtti36wmcg25", "content": "\ud83d\udea8 CVE-2026-66587 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66587\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T14:07:40.759324Z"}, {"uuid": "203bab6a-58c1-4381-a997-ecf18cbfa829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ye6egmacr3iu", "content": "CVE-2026-66587 - WordPress WP Cafe Pro plugin\nCVE ID : CVE-2026-66587\n \n Published : Aug. 24, 2026, 11:54 a.m. | 6\u00a0minutes ago\n \n Description : Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for more deta...", "creation_timestamp": "2026-08-24T12:06:46.792474Z"}, {"uuid": "f529ab5a-4ad8-4816-86b6-cde6f0f3ad8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66587", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttdqhzsjc25", "content": "CVE-2026-66587 - wp cafe pro\nThe WP Cafe Pro add\u2011on for WordPress, in any version older than 3.0.15, lets anyone on the internet view files stored on your web server. This could reveal sensitive information such as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wpcafe #CVE #infosec", "creation_timestamp": "2026-08-24T12:50:05.736309Z"}]}