{"uuid": "7ec383bd-b1ae-4d5f-b8a0-4c5b8f06f6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3n5eiyd27", "content": "CVE-2026-3907 - Hostel\nCVE ID : CVE-2026-3907\n \n Published : July 10, 2026, 9:16 a.m. | 2\u00a0hours, 32\u00a0minutes ago\n \n Description : The Hostel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wphostel-book' shortcode in all versions up to and including 1...", "creation_timestamp": "2026-07-10T11:54:13.753117Z"}