{"vulnerability": "CVE-2026-42415", "sightings": [{"uuid": "0846c4fc-0376-4acf-b4e5-636def78d48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tnht5m2o", "content": "\ud83d\udea8 CVE-2026-42415 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:55.465641Z"}, {"uuid": "5f05d20c-c0c5-4742-954a-b8b2907ac64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393498184652638", "content": "CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality \u22643.9.3. Unauthenticated attackers can steal sensitive data. No official patch yet \u2014 restrict access ASAP. https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b18a06bf1443 #OffSeq #CVE202642415 #Infosec #WordPress #SQLInjection", "creation_timestamp": "2026-10-06T10:30:26.803951Z"}, {"uuid": "dd55d37b-d8ed-4428-a03c-e6d17f4c47c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx77yfdbua2a", "content": "CRITICAL: Porto Theme - Functionality \u22643.9.3 vulnerable to unauthenticated SQL injection (CVE-2026-42415). Patch status unconfirmed \u2014 restrict access now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b...", "creation_timestamp": "2026-10-06T10:30:28.668949Z"}, {"uuid": "68263d8a-dd6c-492d-b958-5508d1c0e4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuooysk27", "content": "CVE-2026-42415 - porto theme - functionality\nThe Porto theme\u2019s Functionality plugin (versions up to 3.9.3) can be accessed by anyone on the internet to insert malicious database queries. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pthemes #CVE #infosec", "creation_timestamp": "2026-10-07T21:40:05.536528Z"}]}