{"vulnerability": "cve-2026-77012", "sightings": [{"uuid": "ba16bbd5-b695-4c30-9215-dbee74ea16de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77012", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mubbns6sbh2p", "content": "CVE-2026-77012 - \u7231\u91c7\u96c6\u6570\u636e\u91c7\u96c6\u548c\u53d1\u5e03\u63d2\u4ef6\nThe \u7231\u91c7\u96c6\u6570\u636e\u91c7\u96c6\u548c\u53d1\u5e03\u63d2\u4ef6 for WordPress (up to version 1.0.0) accepts requests without a unique secret and trusts any URL or file path it receives. This lets anyone on the internet read files on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-30T01:50:04.879817Z"}, {"uuid": "8a5781a7-3d66-4c4f-a7ed-2942e0677922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77012", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mubmbvx3xf2r", "content": "\ud83d\udd34 CVE-2026-77012 - Critical (9.3)\n\nThe \u7231\u91c7\u96c6\u6570\u636e\u91c7\u96c6\u548c\u53d1\u5e03\u63d2\u4ef6 WordPress plugin through 1.0.0 does not require a per-in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77012/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T05:00:18.052559Z"}]}