{"metadata": {"vulnerability": "CVE-2026-19598", "count": 42, "kinds": {"milestone": 4, "sighting": 23, "kev": 5, "other": 10}}, "data": [{"timestamp": "2026-08-12T06:52:47.975Z", "date_only": false, "value": "2026-08-12T06:52:47.975Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-19598", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-12T14:04:04Z", "date_only": false, "value": "2026-08-12T14:04:04.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-19598", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-08-15T04:54:21Z", "date_only": false, "value": "2026-08-15T04:54:21.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-19598", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-08-15T17:25:26.723Z", "date_only": false, "value": "2026-08-15T17:25:26.723Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-19598", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-15T17:25:26.723Z", "date_only": false, "value": "2026-08-15T17:25:26.723Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-19598", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-15T18:10:04.721Z", "date_only": false, "value": "2026-08-15T18:10:04.721037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5bgdy5vm23", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "192892bc-3294-422b-bd74-c463ba04f27a", "content": "CVE-2026-19598 - pods \u2013 custom content types and fields\nThe Pods plugin for WordPress has a security flaw that lets attackers take control of your site without needing a password. This could let them change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sc0ttkclark #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5bgdy5vm23"}, {"timestamp": "2026-08-15T18:16:23Z", "date_only": false, "value": "2026-08-15T18:16:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HMMC-48GM-3645", "record": "GHSA-HMMC-48GM-3645", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-15T18:16:23.860Z", "date_only": false, "value": "2026-08-15T18:16:23.860", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19598", "record": "FKIE_CVE-2026-19598", "field": "published"}, {"timestamp": "2026-08-15T18:31:18Z", "date_only": false, "value": "2026-08-15T18:31:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HMMC-48GM-3645", "record": "GHSA-HMMC-48GM-3645", "field": "published"}, {"timestamp": "2026-08-15T18:31:18Z", "date_only": false, "value": "2026-08-15T18:31:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HMMC-48GM-3645", "record": "GHSA-HMMC-48GM-3645", "field": "modified"}, {"timestamp": "2026-08-15T19:00:16.059Z", "date_only": false, "value": "2026-08-15T19:00:16.059388Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ea3j2qc22", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "42dac3e4-02ee-448f-b1c0-8b62632531d4", "content": "\ud83d\udd34 CVE-2026-19598 - Critical (9.8)\n\nThe Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Esca...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19598/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ea3j2qc22"}, {"timestamp": "2026-08-17T15:49:11.035Z", "date_only": false, "value": "2026-08-17T15:49:11.035762Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-19598", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-17T15:49:11.035Z", "date_only": false, "value": "2026-08-17T15:49:11.035762Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19598", "record": "FKIE_CVE-2026-19598", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-17T15:49:27.097Z", "date_only": false, "value": "2026-08-17T15:49:27.097Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-19598", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-17T15:49:27.097Z", "date_only": false, "value": "2026-08-17T15:49:27.097Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-19598", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-17T18:00:05.311Z", "date_only": false, "value": "2026-08-17T18:00:05.311482Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "3fac88ee-9cd7-4026-b181-855845b99780"}, {"timestamp": "2026-08-18T00:00:11.081Z", "date_only": false, "value": "2026-08-18T00:00:11.081731Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "36964516-706d-460e-b533-add06b0d4fee"}, {"timestamp": "2026-08-20T03:00:03.378Z", "date_only": false, "value": "2026-08-20T03:00:03.378531Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VqkK0eXOWhmRJZ90Bh3PqTJte1bxm7THA5YDoOUEdQFD0DQ", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "4d97d5ae-22d2-432f-bbbf-af970f21c4d6"}, {"timestamp": "2026-08-20T03:00:05.057Z", "date_only": false, "value": "2026-08-20T03:00:05.057010Z", "kind": "sighting", "label": "Seen", "source": "Telegram/8WvP_FT-f7WzYbsij8a64BMZqLNb4WRxjiDs2Lo6HyIBG_I", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "40a16792-5b57-422d-8808-be916e1b1716"}, {"timestamp": "2026-08-20T12:48:10.287Z", "date_only": false, "value": "2026-08-20T12:48:10.287", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-19598", "record": "FKIE_CVE-2026-19598", "field": "lastModified"}, {"timestamp": "2026-08-21T00:00:11.320Z", "date_only": false, "value": "2026-08-21T00:00:11.320327Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8WvP_FT-f7WzYbsij8a64BMZqLNb4WRxjiDs2Lo6HyIBG_I", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "4677a5d0-98de-4fa9-81fd-390382d76b31"}, {"timestamp": "2026-08-21T16:16:46.858Z", "date_only": false, "value": "2026-08-21T16:16:46.858222Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtm5vbvylg27", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "4fc000df-0415-47d9-8010-f892034ee1bd", "content": "CVE-2026-19598, a CVSS 9.8 flaw in the Pods WordPress plugin, enables complete site takeover. Wordfence is already blocking attacks in the wild.\n\n#Pods #CVE202619598 #WordPress #PrivilegeEscalation #SiteTakeover #WebSecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mtm5vbvylg27"}, {"timestamp": "2026-08-22T00:00:09.601Z", "date_only": false, "value": "2026-08-22T00:00:09.601939Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/20v2IoyFQshDHts5_7Yn4T7Cia_Iss1KLurhB1ZSh0DbW1c", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "40ef3a8a-d463-4c59-8aad-e592b6d300b1"}, {"timestamp": "2026-08-22T01:27:25.352Z", "date_only": false, "value": "2026-08-22T01:27:25.352409Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtn4nu7eqa2k", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "2b56c467-c54d-4d1f-a11f-4745922078bf", "content": "100.000 sitios WordPress expuestos por fallo en plugin Pods\n\n\u00bfTu WordPress usa Pods? La falla CVE-2026-19598 deja 100.000 sitios WordPress expuestos: un atacante puede tomar el control en minutos. Cheque\u00e1 tu versi\u00f3n\n\n#pods #cve202619598 #escaladadeprivilegios #seguridadwordpress #pluginswordpress", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtn4nu7eqa2k"}, {"timestamp": "2026-08-22T08:27:29Z", "date_only": false, "value": "2026-08-22T08:27:29+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-19598", "field": "timestamps.asserted_at", "uuid": "772a9cf6-451d-498c-ac93-3c264c90738d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-22T08:27:29Z", "date_only": false, "value": "2026-08-22T08:27:29+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-19598", "field": "timestamps.first_seen_at", "uuid": "772a9cf6-451d-498c-ac93-3c264c90738d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-22T08:27:29Z", "date_only": false, "value": "2026-08-22T08:27:29+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-19598", "field": "status.status_updated_at", "uuid": "772a9cf6-451d-498c-ac93-3c264c90738d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-22T08:27:29.848Z", "date_only": false, "value": "2026-08-22T08:27:29.848Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-19598", "field": "evidence.0.details.added_date", "uuid": "772a9cf6-451d-498c-ac93-3c264c90738d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-22T19:00:06.154Z", "date_only": false, "value": "2026-08-22T19:00:06.154243Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98705", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "641187f4-718d-4568-8f1d-f9842da2f515", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19598-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 02:13:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98705"}, {"timestamp": "2026-08-23T00:00:11.783Z", "date_only": false, "value": "2026-08-23T00:00:11.783483Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98705", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "3e01fe1b-81ae-4195-9fa1-01e3e536fa4e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19598-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 02:13:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98705"}, {"timestamp": "2026-08-23T09:00:01Z", "date_only": false, "value": "2026-08-23T09:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-19598", "field": "timestamps.recorded_at", "uuid": "772a9cf6-451d-498c-ac93-3c264c90738d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-23T09:00:46.133Z", "date_only": false, "value": "2026-08-23T09:00:46.133015Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/772a9cf6-451d-498c-ac93-3c264c90738d", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "35f8ff6a-c801-4d77-aa27-934ce5b7226e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/772a9cf6-451d-498c-ac93-3c264c90738d"}, {"timestamp": "2026-08-24T15:00:05.948Z", "date_only": false, "value": "2026-08-24T15:00:05.948925Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "6b228097-b74a-4f37-a98e-7f665f98b5e1", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml"}, {"timestamp": "2026-08-25T05:02:49.898Z", "date_only": false, "value": "2026-08-25T05:02:49.898679Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23u5pzq2n", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "545bdbd3-f65c-4dcc-85b1-4daaae1b7976", "content": "Daily IT Security Digest \u2014 2026-08-25\nVulnerability (CVE-2026-19598) \u2014 Full Site Takeover\n\nAn unauthenticated authorization bypass in the widely-used Pods WordPress plugin (CVE-2026-19598) allows attackers to bypass security checks entirely and gain full administrator access. This gives attackers", "url": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23u5pzq2n"}, {"timestamp": "2026-08-25T12:00:04.193Z", "date_only": false, "value": "2026-08-25T12:00:04.193063Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/captainsmok3r_official/476", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "a33b955a-ea8e-4291-b52c-5946c836e523", "url": "https://t.me/captainsmok3r_official/476"}, {"timestamp": "2026-08-25T12:00:04.238Z", "date_only": false, "value": "2026-08-25T12:00:04.238647Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/captainsmok3r_official/475", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "3822cfbe-f7e3-43f9-a95f-9668df2c93e7", "content": "CVE-2026-19598-PoC ->", "url": "https://t.me/captainsmok3r_official/475"}, {"timestamp": "2026-08-26T18:06:03.847Z", "date_only": false, "value": "2026-08-26T18:06:03.847541Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtywdbqygh2x", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "a0fe841f-2b87-47f9-8e55-6d559ea4692a", "content": "CVE-2026-19598 is trending. Hype score 5, currently #4 on cvemon.\n\nThe Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19598", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mtywdbqygh2x"}, {"timestamp": "2026-08-27T07:52:09.780Z", "date_only": false, "value": "2026-08-27T07:52:09.780345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu2eihqcj426", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "3503ebb2-2985-4b13-a803-cc20ab020126", "content": "Wordfence found CVE-2026-19598, a critical unauthenticated flaw in the Pods WordPress plugin (100,000+ installs) letting attackers reset any password, including the admin's.\n\n#PodsPlugin #CVE202619598 #WordPress #Wordfence #PrivilegeEscalation", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mu2eihqcj426"}, {"timestamp": "2026-08-27T07:56:14.041Z", "date_only": false, "value": "2026-08-27T07:56:14.041021Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mu2epr2lsy2u", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "2e8e187f-d403-4703-abbf-417a8b5532df", "content": "CVE-2026-19598: Pods\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30ea\u30bb\u30c3\u30c8\u53ef\u80fd\u306b\n\nWordPress\u30b5\u30a4\u30c8\u7ba1\u7406\u8005\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u30ed\u30b0\u30a4\u30f3\u3059\u3089\u7d4c\u305a\u306b\u5909\u66f4\u3055\u308c\u3066\u3057\u307e\u3046\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u4eba\u6c17\u30d7\u30e9\u30b0\u30a4\u30f3Pods\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3092\u6301\u305f\u306a\u3044\u7b2c\u4e09\u8005\u304c\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u3092\u6b21\u3005\u3068\u56de\u907f\u3057\u3001\u7ba1\u7406\u6a5f\u80fd\u306b\u76f4\u63a5\u5230\u9054\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u3063\u3066\u3044\u307e\u3057\u305f\u3002Wordfence\u306b\u3088\u308b\u3068...", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mu2epr2lsy2u"}, {"timestamp": "2026-08-28T12:45:05.858Z", "date_only": false, "value": "2026-08-28T12:45:05.858281Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/wordpress-rilevata-vulnerabilita-nel-plugin-pods", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "89d27562-7d00-44a7-9f8a-b2164f818d0f", "url": "https://www.acn.gov.it/portale/w/wordpress-rilevata-vulnerabilita-nel-plugin-pods"}, {"timestamp": "2026-09-08T04:00:03.687Z", "date_only": false, "value": "2026-09-08T04:00:03.687633Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "db1b994f-2c1b-4871-b3b9-67db8f81e707"}, {"timestamp": "2026-09-09T00:00:42.050Z", "date_only": false, "value": "2026-09-09T00:00:42.050692Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "record": "CVE-2026-19598", "field": "creation_timestamp", "uuid": "5c4b1e33-8d5b-4421-b267-6ca6f1a07c8d"}]}