{"uuid": "7e9336ee-ad32-4226-ad35-c56bb0ae4b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxda5ql55r2y", "content": "An active WordPress XSS campaign exploits Ninja Forms flaw CVE-2026-94504 and CVE-2026-93836 to plant hidden admin accounts. Patch now.\n\n#WordPress #NinjaForms #WooCommerce #CVE202694504 #CVE202693836 #XSS #ExploitedInTheWild #Malware", "creation_timestamp": "2026-10-08T00:44:07.235295Z"}