{"vulnerability": "cve-2026-81402", "sightings": [{"uuid": "f433e846-9b49-465d-805d-f64e862a3a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdjhdpavg2t", "content": "CVE-2026-81402 - ds ad rotator\nThe DS Ad Rotator plugin for WordPress does not verify who is uploading or what kind of file is being sent. This means an outsider could place any file, including executable code, on a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-09-12T16:40:10.564846Z"}, {"uuid": "e52b83e7-d0fb-4960-8962-f540cfee6e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81402", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvduoifhap2o", "content": "\ud83d\udd34 CVE-2026-81402 - Critical (9.8)\n\nThe DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verif...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81402/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T20:01:01.294225Z"}]}