{"vulnerability": "cve-2026-7661", "sightings": [{"uuid": "92d97e10-a002-434b-8563-984003a08b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7661", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mlnxngmfkn2u", "content": "CVE-2026-7661: XSS en Bootstrap Shortcode WordPress\n\nCVE-2026-7661 WordPress afecta Bootstrap Shortcode hasta v1.0: un Contributor puede inyectar scripts en tu sitio. Verific\u00e1 si est\u00e1s expuesto y qu\u00e9 hacer...\n\n#cve20267661 #bootstrapshortcode #storedxss #wordpressseguridad #wordfence", "creation_timestamp": "2026-05-12T14:08:48.803192Z"}, {"uuid": "4ab0b8d7-bede-4c34-a2c7-c55684371764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7661", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlxk2dy2zi2l", "content": "CVE-2026-7661 bootstrap-shortcode (CVSS Score 6.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-16T09:32:08.338044Z"}, {"uuid": "38d1b5f1-9d37-4901-b33b-b7d8bd9c9617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmnpx6ct52t", "content": "CVE-2026-76613 - yootheme pro extension for joomla\nThe YOOtheme Pro extension for Joomla (versions 1.0.0 to 5.0.40) lets users with contributor rights add crafted content that changes the website's database. This could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-21T21:00:07.633288Z"}, {"uuid": "fb7524d7-64ed-4a54-867f-9643f87fea32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtlwnw47fs23", "content": "\ud83d\udea8 CVE-2026-76613 \u2014 CVSS 9.2 CRITICAL\n\nJoomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76613\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T14:07:23.057528Z"}, {"uuid": "bf6d4747-02f2-4756-92ca-26815e4ca503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76611", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtlx2yz2rs2p", "content": "\ud83d\udea8 Critical security update for ZOO\n\nWe fixed 4 vulnerabilities:\n\nCVE-2026-76611: Path traversal\nCVE-2026-76612: Cross-site scripting\nCVE-2026-77028: External redirects\nCVE-2026-77029: CSRF attacks\n\nUpdate ZOO immediately to 4.1.66.", "creation_timestamp": "2026-08-21T14:14:42.655517Z"}, {"uuid": "088a5768-308b-48c8-948b-9652296e413a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76612", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtlx2yz2rs2p", "content": "\ud83d\udea8 Critical security update for ZOO\n\nWe fixed 4 vulnerabilities:\n\nCVE-2026-76611: Path traversal\nCVE-2026-76612: Cross-site scripting\nCVE-2026-77028: External redirects\nCVE-2026-77029: CSRF attacks\n\nUpdate ZOO immediately to 4.1.66.", "creation_timestamp": "2026-08-21T14:14:42.726769Z"}, {"uuid": "a77b0039-1524-4610-94f6-f3689f5080d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtlx6e2yo22p", "content": "\ud83d\udea8 Critical security update for YOOtheme\n\nWe fixed 2 vulnerabilities:\n\nCVE-2026-75115: Arbitrary file read (contributor-level)\nCVE-2026-76613: SQL injection (contributor-level)\n\nUpdate YOOtheme immediately to 5.0.41 if untrusted users have permission to create articles.", "creation_timestamp": "2026-08-21T14:16:35.272942Z"}, {"uuid": "c538f3da-d42e-4ff3-bd12-b03b0e2138a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76612", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2eqfah7eok4kj", "content": "CVE-2026-76612 - Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo\nCVE ID : CVE-2026-76612\n \n Published : Aug. 21, 2026, 1:18 p.m. | 31\u00a0minutes ago\n \n Description : Joomla Extension - yootheme.com - Unauthenticated stored XSS via us...", "creation_timestamp": "2026-08-21T14:41:32.342402Z"}, {"uuid": "7d518497-8ece-404b-b892-5400059dcccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jda5phzqedbeq", "content": "CVE-2026-76613 - Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40\nCVE ID : CVE-2026-76613\n \n Published : Aug. 21, 2026, 1:18 p.m. | 31\u00a0minutes ago\n \n Description : Joomla Extension - yootheme.com - Authenticated, privileged...", "creation_timestamp": "2026-08-21T14:43:31.734322Z"}]}