{"vulnerability": "cve-2026-87796", "sightings": [{"uuid": "742b5d90-4f08-46cd-8133-bbed0efc9fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoxhkad7t25", "content": "CVE-2026-87796 - multi uploader for gravity forms\nThe Multi Uploader for Gravity Forms plugin for WordPress lets unauthenticated users place any type of file on your server because it does not properly check file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sh1zen #CVE #infosec", "creation_timestamp": "2026-09-17T05:50:05.917786Z"}, {"uuid": "14c38728-b3f9-4588-a283-7445c1926bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117284852533602073", "content": "CVE-2026-87796 (CRITICAL, CVSS 9.8): sh1zen Multi Uploader for Gravity Forms \u22641.1.9 lets unauthenticated attackers upload arbitrary files, risking remote code execution. No patch yet \u2014 disable the plugin or restrict uploads. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1zen-multi-uploader-for-cfd4181d51e0b5e2 #OffSeq #WordPress #CVE #RCE", "creation_timestamp": "2026-09-17T06:00:25.757516Z"}, {"uuid": "b4575726-dfe3-466b-a960-75e8f3984b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87796", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvoy22zlsx2f", "content": "CRITICAL: CVE-2026-87796 in sh1zen Multi Uploader for Gravity Forms (\u22641.1.9) allows unauthenticated arbitrary file upload \u2014 potential RCE. Disable or restrict uploads until fix confirmed. https://radar.offseq.com/threat/cve-2026-87796-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sh1...", "creation_timestamp": "2026-09-17T06:00:27.805915Z"}, {"uuid": "5c695eb8-2794-404a-8ace-38d1677d412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87796", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvoyfxypnb24", "content": "\ud83d\udea8 CVE-2026-87796 \u2014 CVSS 9.8 CRITICAL\n\nThe Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87796\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T06:07:06.751746Z"}]}