{"vulnerability": "CVE-2026-2800", "sightings": [{"uuid": "f07ea49d-2047-4165-842e-088faef643ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2800", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqvgx7kzo2v", "content": "", "creation_timestamp": "2026-02-26T09:36:12.809323Z"}, {"uuid": "d7bd54ad-c671-41d3-9fdf-dfa7de9b7791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28005", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgfmuhmkn2f", "content": "CVE-2026-28005 - kadence woocommerce email designer\nAn outdated version of the Kadence WooCommerce Email Designer plugin on your WordPress site can allow unauthorized users to access sensitive data. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nexcess #CVE #infosec", "creation_timestamp": "2026-08-06T15:54:04.175343Z"}, {"uuid": "1e9ab679-4610-431e-9e4f-a066916b7f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/flg4mb36qugog", "content": "CVE-2026-28002 - WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability\nCVE ID : CVE-2026-28002\n \n Published : Aug. 13, 2026, 1:42 p.m. | 30\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability ...", "creation_timestamp": "2026-08-13T14:44:43.111953Z"}, {"uuid": "9eb39195-e596-4a8c-8014-0a368bbb942c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28001", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxvurl7ur2c", "content": "CVE-2026-28001\nWP Directory Kit versions 1.5.4 and below are vulnerable to SQL injection attacks. This means an attacker can potentially access or manipulate sensitive data without needing a password. To stay safe, update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T15:00:05.000347Z"}, {"uuid": "19aa258a-ea66-44ac-9862-118b7a259705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28008", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxvuszsa22b", "content": "CVE-2026-28008\nAn outdated version of the WordPress OAuth plugin allows anyone to access protected areas without a password. This can lead to unauthorized changes or data theft. Update the plugin to the latest version to fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T15:00:06.263787Z"}]}