{"vulnerability": "CVE-2026-6504", "sightings": [{"uuid": "ebfcb0a1-6adb-416d-b195-38f67059f89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlsxgcb7c62p", "content": "CVE-2026-6504 - Royal Addons for Elementor\nCVE ID : CVE-2026-6504\n \n Published : May 14, 2026, 9:16 a.m. | 3\u00a0hours, 14\u00a0minutes ago\n \n Description : The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tag' pa...", "creation_timestamp": "2026-05-14T13:48:06.636541Z"}, {"uuid": "a494279e-6d80-421b-85aa-10e269fa24c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65048", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr65bleqo52e", "content": "CVE-2026-65048 - ninja forms\nThe Ninja Forms plugin for WordPress has a security flaw that allows an attacker to inject malicious code into an administrator's browser. This could potentially allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ninjaforms #saturdaydrive #CVE #infosec", "creation_timestamp": "2026-07-21T15:38:05.743535Z"}, {"uuid": "78eb4f53-3087-4ddf-856a-ed47d890d4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65048", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrbn7txhu52l", "content": "A Ninja Forms vulnerability chain hits 600K+ sites. CVE-2026-65048 is an unauthenticated stored XSS rated CVSS 9.3. Update to 3.14.10 now.\n\n#NinjaForms #WordPress #StoredXSS #CVE202665048 #PluginSecurity #InfoSec", "creation_timestamp": "2026-07-23T01:01:27.191882Z"}, {"uuid": "97902ea9-d79c-4b3e-b361-6df23881f462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65048", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrbqn4ekia2i", "content": "Ninja Forms Bleeds 600K Sites While the Bureaucracy Keeps Perfecting Silence\nPANIC 78% | Lag 0.0h | Ninja Forms 3.14.10 fixes an unauthenticated stored XSS chain tracked as CVE-2026-65048, rated CVSS \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-23T02:02:33.178009Z"}]}