{"vulnerability": "cve-2026-75860", "sightings": [{"uuid": "b5b1d513-4ae5-475b-b116-cbbc2d32d4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtkjkevlxp2v", "content": "CVE-2026-75860: toma de control total en WordPress\n\nPlugin JSON Options en WordPress con CVE-2026-75860: cualquier atacante sin contrase\u00f1a puede tomar control total. Verific\u00e1 si tu sitio est\u00e1 expuesto ahora.\n\n#cve202675860 #jsonoptions #wordpress #escaladadeprivilegios #vulnerabilidadcr\u00edtica", "creation_timestamp": "2026-08-21T00:40:06.451855Z"}, {"uuid": "31accb5e-a35d-48fa-a3fc-4dda3f3944b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117126661700027750", "content": "CVE-2026-75860: CRITICAL privilege escalation in JSON Options \u22640.0.4. Unauthenticated attackers can update WordPress options & gain admin access. Remove or disable plugin until fix is available. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b89b1 #OffSeq #WordPress #CVE202675860", "creation_timestamp": "2026-08-20T07:30:25.140616Z"}, {"uuid": "489cdcdc-90f2-4e04-aa8d-90dfcac0f3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtipz7f4er27", "content": "JSON Options plugin (\u22640.0.4) hit by CRITICAL vuln (CVE-2026-75860): unauthenticated users can escalate to admin \u2014 full WordPress site takeover possible. Remove or restrict plugin now. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b...", "creation_timestamp": "2026-08-20T07:30:27.252679Z"}, {"uuid": "c1809561-3289-4de9-8dc2-84a89fb8b94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiyer75i523", "content": "CVE-2026-75860 - json options\nAn outdated WordPress plugin allows unauthenticated users to modify settings. This can lead to unauthorized user registration and potential site takeover. Update the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonoptions #unknown #CVE #infosec", "creation_timestamp": "2026-08-20T10:00:05.205702Z"}, {"uuid": "85d45f18-177b-4d42-b332-f8c307d39fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtj7hywmk523", "content": "\ud83d\udea8 CVE-2026-75860 \u2014 CVSS 9.8 CRITICAL\n\nThe JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T12:07:09.237529Z"}]}