{"uuid": "b16257c8-229e-46d3-8a05-16cb2259bb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11563", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqmrx5mbf72r", "content": "CVE-2026-11563. CVSS 9.6. Word Count and Social Shares plugin lets any Subscriber delete arbitrary files. wp-config.php gone. Database exposed. Full takeover. No patch available. Disable it now. Scan your WordPress site: pulse-wp.com\n#WordPress #CSRF #CyberSecurity", "creation_timestamp": "2026-07-14T18:00:09.572014Z"}