{"vulnerability": "CVE-2026-5722", "sightings": [{"uuid": "eb35b482-abe8-4324-afdc-469d52230db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5722", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml34zrwaps2n", "content": "\ud83d\udd34 CVE-2026-5722 - Critical (9.8)\n\nThe MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions u...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5722/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T02:24:36.569364Z"}, {"uuid": "10aebc3d-5c4c-423a-acbe-e361f4ea6acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5722", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml35d2qrq62t", "content": "CVE-2026-5722 - MoreConvert Pro\nCVE ID : CVE-2026-5722\n \n Published : May 5, 2026, 1:24 a.m. | 56\u00a0minutes ago\n \n Description : The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14. This is due to the guest...", "creation_timestamp": "2026-05-05T02:29:46.634710Z"}, {"uuid": "5869d918-9fa0-4fe7-8ac4-22e9f1faa433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5722", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ml36zyame72f", "content": "\ud83d\udea8 MoreConvert Pro (WordPress \u22641.9.14) CRITICAL auth bypass lets attackers hijack accounts, incl. admins. Disable plugin or restrict access until patched. https://radar.offseq.com/threat/cve-2026-5722-cwe-287-improper-authentication-in-m-b66ead43 #OffSeq #WordPress #CVE20265722", "creation_timestamp": "2026-05-05T03:00:30.058476Z"}, {"uuid": "94ddd3d2-c3f2-4910-9597-a5f86a4de98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5722", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116519732985387008", "content": "\ud83d\udea8 CVE-2026-5722 | CRITICAL auth bypass in MoreConvert Pro (\u22641.9.14, WordPress). Attackers can use flawed guest waitlist token logic to hijack accounts \u2014 even admin! Disable plugin or restrict access until patch. https://radar.offseq.com/threat/cve-2026-5722-cwe-287-improper-authentication-in-m-b66ead43 #OffSeq #WordPress #CVE20265722 #infosec", "creation_timestamp": "2026-05-05T03:00:30.105075Z"}, {"uuid": "4aff9dc0-09c7-4fb0-86f6-223c912359b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5722", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml3hqno7pr2c", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3MoreConvert Pro\uff08v1.9.14\u307e\u3067\uff09\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u3001\u5de7\u5999\u306a\u64cd\u4f5c\u3067\u672a\u8a8d\u8a3c\u3067\u3082\u7ba1\u7406\u8005\u6a29\u9650\u3092\u5f97\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-5722 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-05-05T05:36:20.128215Z"}, {"uuid": "9b3cf1b7-65dc-4268-b3cf-8ce36077de6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57224", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccon2eyw25", "content": "\ud83d\udd17 CVE : CVE-2026-57222, CVE-2026-57224, CVE-2026-57227, CVE-2026-57228, CVE-2026-57229", "creation_timestamp": "2026-07-10T14:00:19.779806Z"}, {"uuid": "13758793-26de-4de5-aea1-ee16f168ce27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57222", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccon2eyw25", "content": "\ud83d\udd17 CVE : CVE-2026-57222, CVE-2026-57224, CVE-2026-57227, CVE-2026-57228, CVE-2026-57229", "creation_timestamp": "2026-07-10T14:00:19.732823Z"}, {"uuid": "21bfb2a7-5f3d-40e8-bd36-28fb64f2bcf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57227", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccon2eyw25", "content": "\ud83d\udd17 CVE : CVE-2026-57222, CVE-2026-57224, CVE-2026-57227, CVE-2026-57228, CVE-2026-57229", "creation_timestamp": "2026-07-10T14:00:19.819362Z"}, {"uuid": "f22e1c49-84d2-424e-9da4-2c7451bc12ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57228", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccon2eyw25", "content": "\ud83d\udd17 CVE : CVE-2026-57222, CVE-2026-57224, CVE-2026-57227, CVE-2026-57228, CVE-2026-57229", "creation_timestamp": "2026-07-10T14:00:19.855705Z"}, {"uuid": "afae236d-dae6-42ac-ac08-4b6ab284fe51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57229", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqccon2eyw25", "content": "\ud83d\udd17 CVE : CVE-2026-57222, CVE-2026-57224, CVE-2026-57227, CVE-2026-57228, CVE-2026-57229", "creation_timestamp": "2026-07-10T14:00:19.896380Z"}, {"uuid": "6bb72b29-dffa-4809-a9a9-875adf411fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57220", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd5jlc2of2c", "content": "\ud83d\udfe0 CVE-2026-57220 - High (7.5)\n\nRabbitMQ is a messaging and streaming broker. Prior to 4.2.6, the RabbitMQ stream listener does n...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-57220/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T22:00:41.676357Z"}, {"uuid": "7e550f49-cfd5-42c4-920d-ca539a5c70a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57220", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmo6jocb2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57220 \u0432 RabbitMQ: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7ED8495D-68FC-4C27-975B-41812B626125", "creation_timestamp": "2026-07-11T02:31:41.859472Z"}, {"uuid": "d8eacd21-5220-44f1-95e0-f07e6138b68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57221", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmoomziz2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57221 \u0432 RabbitMQ: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3AE42222-C666-49B0-9206-2022445E9491", "creation_timestamp": "2026-07-11T02:32:02.064642Z"}, {"uuid": "8d5cadfb-103a-497d-8e5d-17333e28c93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57220", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqecf4r4kc2n", "content": "CVE-2026-57220 - DoS in RabbitMQ. Unauthenticated remote client can consume broker memory via oversized stream frames. CVSS 7.5. Update to 4.2.6 now. #CVE #RabbitMQ #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-57220/", "creation_timestamp": "2026-07-11T09:00:21.285544Z"}, {"uuid": "3d6a1399-3598-4d75-85ff-0ffbcaff77d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57221", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqjwlx7trt2i", "content": "RabbitMQ flaws CVE-2026-5721 and CVE-2026-57221 can expose OAuth secrets and enable queue and exchange enumeration, raising risks in shared or internet-exposed deployments. #RabbitMQ #OAuth #CVE2026", "creation_timestamp": "2026-07-13T14:45:22.915335Z"}, {"uuid": "cacf464e-e794-4863-9d5e-34df9c667702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5722", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:15.639756Z"}, {"uuid": "db54d379-052c-46f5-9777-15782cd118fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5722", "type": "seen", "source": "https://t.me/shimiscyberworld/1200", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-5722 \u2014 CVSS 9.8\nMoreConvert Pro WordPress Plugin Critical Authentication Bypass (CVE-2026-5722)\n\nCVE-2026-5722 \u2014 The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14. This is due to the guest waitlist veri\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-5722 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.853955Z"}, {"uuid": "841b8194-9969-4362-af68-c6ae60c471c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5722", "type": "seen", "source": "https://t.me/shimiscyberworld/1200", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-5722 \u2014 CVSS 9.8\nMoreConvert Pro WordPress Plugin Critical Authentication Bypass (CVE-2026-5722)\n\nCVE-2026-5722 \u2014 The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14. This is due to the guest waitlist veri\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-5722 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:10.304497Z"}, {"uuid": "2d385b03-eddc-4e01-9150-a4dc1b5648e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5722", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:35.086690Z"}]}