{"vulnerability": "cve-2026-92229", "sightings": [{"uuid": "80e4e5fe-b3a7-4725-82b9-90c00de1d853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvtso26brn2b", "content": "\ud83d\udea8 CVE-2026-92229 \u2014 CVSS 9.1 CRITICAL\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnera...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92229\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T04:07:33.569490Z"}, {"uuid": "9125e82e-33a1-428f-9c56-3c3c212f07cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92229", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117295823161676364", "content": "CVE-2026-92229: CRITICAL code injection in wpmudev Forminator Forms plugin (\u22641.57.2). Unauthenticated attackers can execute arbitrary shortcodes, risking full WordPress site compromise. Restrict or disable plugin now. https://radar.offseq.com/threat/cve-2026-92229-cwe-94-improper-control-of-generation-of-code-code-injection-in-wpmudev-forminator-8ac627c2b84841fc #OffSeq #WordPress #CVE202692229", "creation_timestamp": "2026-09-19T04:30:24.251891Z"}, {"uuid": "c2259acb-58c8-420e-8242-a79bd5ff07cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92229", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvttwwno3z2e", "content": "CRITICAL: wpmudev Forminator Forms plugin (\u22641.57.2) vulnerable to code injection \u2014 unauthenticated attackers can execute arbitrary shortcodes. Restrict or disable until patched. https://radar.offseq.com/threat/cve-2026-92229-cwe-94-improper-control-of-generation-of-code-code-injection-in-wpmudev-...", "creation_timestamp": "2026-09-19T04:30:27.309488Z"}, {"uuid": "7da7d550-85a3-472c-95b5-dad30326a91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvu36tepbc2r", "content": "CVE-2026-92229\nThe Forminator Forms plugin for WordPress (all versions up to 1.57.2) can let anyone on the internet cause the site to run hidden code snippets called shortcodes. This could let attackers display unwanted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-19T06:40:06.746002Z"}, {"uuid": "53d814ad-d61a-48e5-8ecb-a211584ed549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4jakjo52b", "content": "\ud83d\udd34 CVE-2026-92229 - Critical (9.1)\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPres...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92229/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:03:51.858521Z"}, {"uuid": "4a89aa89-2ff7-4e75-996b-46ce1918881f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvu5k5jzrh2k", "content": "\ud83d\udd34 CVE-2026-92229 - Critical (9.1)\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPres...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-92229/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:22:14.306937Z"}, {"uuid": "1dc2e2bc-fe26-4b2d-8859-697ebd771fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102802", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-92229\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-92229 \u2014 Forminator \u22641.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T22:00:04.656409Z"}, {"uuid": "a207afcd-423a-4967-9ab9-9a734fc0006e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102802", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-92229\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-92229 \u2014 Forminator \u22641.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T00:00:06.925662Z"}]}