{"vulnerability": "CVE-2026-7660", "sightings": [{"uuid": "8b4e9c21-d144-4f6e-a6d1-4955072f23f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7660", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvwsbye3v2i", "content": "CVE-2026-7660 - Easy Updates Manager\nCVE ID : CVE-2026-7660\n \n Published : May 28, 2026, 8:16 a.m. | 1\u00a0hour, 50\u00a0minutes ago\n \n Description : The Easy Updates Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'paged' parameter in versions up t...", "creation_timestamp": "2026-05-28T11:40:06.258387Z"}, {"uuid": "bfe492c9-d87a-465e-9be2-f166e3d2cc11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76602", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5a5fc345v763s", "content": "CVE-2026-76602 - Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik\nCVE ID : CVE-2026-76602\n \n Published : Aug. 22, 2026, 2:21 p.m. | 12\u00a0minutes ago\n \n Description : Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY ...", "creation_timestamp": "2026-08-22T14:54:05.436697Z"}, {"uuid": "e1f42d48-a209-46cf-91e1-0fc8d9db7f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76606", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/amxzpg76lgeoj", "content": "CVE-2026-76606 - Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik\nCVE ID : CVE-2026-76606\n \n Published : Aug. 22, 2026, 2:23 p.m. | 11\u00a0minutes ago\n \n Description : Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7...", "creation_timestamp": "2026-08-22T15:02:05.494367Z"}, {"uuid": "f6a7693d-1626-4fa8-a3db-7d7faf5a0793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76602", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtomuhrgrk2b", "content": "CVE-2026-76602 - fabrik extension for joomla\nThe Fabrik component for Joomla (versions before 4.7.3) lets anyone send specially crafted requests that manipulate how data is sorted, which can cause the system to reveal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T15:50:05.085048Z"}, {"uuid": "631face5-946d-4e41-92da-bee493b0f194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76604", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtomuj5m5o2f", "content": "CVE-2026-76604 - fabrik extension for joomla\nThe Fabrik add\u2011on for Joomla (versions before 4.7.3) contains a form field that accepts code from anyone on the internet. An attacker could use this to execute commands on your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T15:50:06.297314Z"}, {"uuid": "b6df5747-9d25-49bf-bb28-650dbcde55b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76605", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtongeeqp22e", "content": "CVE-2026-76605 - fabrik extension for joomla\nWebsites using the Joomla Fabrik add\u2011on older than version 4.7.3 are at risk because a specially crafted image tag can cause the server to execute unwanted code. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T16:00:05.551108Z"}, {"uuid": "18109cf9-af2f-4411-b46e-490004cd706f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtongfmfbz25", "content": "CVE-2026-76606 - fabrik extension for joomla\nWebsites that use the Fabrik add\u2011on for Joomla, version older than 4.7.3, are vulnerable. An attacker can craft a special image request that makes the server open files outside the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T16:00:07.558607Z"}, {"uuid": "23371c0d-0e7f-42bb-bf58-05c4c196f4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76607", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtony7gztw2t", "content": "CVE-2026-76607 - fabrik extension for joomla\nThe Fabrik add\u2011on for Joomla, in versions before 4.7.3, does not check whether a user is allowed to download a file. This means that people without proper rights could retrieve\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T16:10:04.724582Z"}, {"uuid": "7dd7e2e3-098e-420b-8a6e-c79c26a9c3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76602", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtontooxjf25", "content": "\ud83d\udea8 CVE-2026-76602 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.3 - The order p...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76602\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:32.170569Z"}, {"uuid": "06ce9512-9f38-476d-b643-4a19893c459e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76604", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtontwjvyx2e", "content": "\ud83d\udea8 CVE-2026-76604 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76604\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:40.770607Z"}, {"uuid": "246b8d3f-1da8-4497-8303-c887c852e4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76605", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtonu6fsay2y", "content": "\ud83d\udea8 CVE-2026-76605 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.3 - ???.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76605\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:48.564405Z"}, {"uuid": "8881c16c-9e5f-4897-acb2-685cf7c67617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76606", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtonugbclx2c", "content": "\ud83d\udea8 CVE-2026-76606 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.3 - ???.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76606\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:07:56.957982Z"}, {"uuid": "97b72a0c-1a1e-4b3d-8a9f-bc1fb099d47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76607", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtonunzvcj2f", "content": "\ud83d\udea8 CVE-2026-76607 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.3 - ???.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76607\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T16:08:05.433528Z"}, {"uuid": "b799538d-9de9-4762-8108-0702c2badb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76607", "type": "seen", "source": "Telegram/RUU6RS1whx44wa05b07NI3oHqgXOPG7HDetlVgf3fX7JKT0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.043810Z"}, {"uuid": "ee615866-0fc3-4af5-9153-9f8890da8d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76602", "type": "seen", "source": "Telegram/6MOWzdsuBRUfSRyh2aRpTFk-sLxYOyyrOXiUm5uMNWePPGY", "content": "", "creation_timestamp": "2026-08-24T21:00:05.812822Z"}, {"uuid": "ee44f392-a6c1-47cc-b166-cf2a90d65192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76604", "type": "seen", "source": "Telegram/RUU6RS1whx44wa05b07NI3oHqgXOPG7HDetlVgf3fX7JKT0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.149047Z"}, {"uuid": "de1edead-6d06-41e6-86dd-9a6094d289e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76605", "type": "seen", "source": "Telegram/RUU6RS1whx44wa05b07NI3oHqgXOPG7HDetlVgf3fX7JKT0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.198285Z"}, {"uuid": "2e9ab611-739e-46c9-bb9e-1f209fd46ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76606", "type": "seen", "source": "Telegram/RUU6RS1whx44wa05b07NI3oHqgXOPG7HDetlVgf3fX7JKT0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.239055Z"}, {"uuid": "08e859d0-0bf0-46c9-8bb9-e214072d5821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76607", "type": "published-proof-of-concept", "source": "Telegram/RUU6RS1whx44wa05b07NI3oHqgXOPG7HDetlVgf3fX7JKT0", "content": "", "creation_timestamp": "2026-08-25T00:00:07.634645Z"}, {"uuid": "63a7bcf2-86a3-422e-a95b-977b36bff60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76606", "type": "published-proof-of-concept", "source": "Telegram/RUU6RS1whx44wa05b07NI3oHqgXOPG7HDetlVgf3fX7JKT0", "content": "", "creation_timestamp": "2026-08-25T00:00:07.319821Z"}, {"uuid": "ed55d8f5-af2c-4bca-a3b2-1dc063b4075d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76602", "type": "published-proof-of-concept", "source": "Telegram/6MOWzdsuBRUfSRyh2aRpTFk-sLxYOyyrOXiUm5uMNWePPGY", "content": "", "creation_timestamp": "2026-08-25T00:00:07.869572Z"}, {"uuid": "260f774e-4eaf-455b-97c6-766aa1962b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76605", "type": "published-proof-of-concept", "source": "Telegram/RUU6RS1whx44wa05b07NI3oHqgXOPG7HDetlVgf3fX7JKT0", "content": "", "creation_timestamp": "2026-08-25T00:00:07.407444Z"}, {"uuid": "7f6c42c5-7a4d-4921-bdf5-0b42d8e631af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76604", "type": "published-proof-of-concept", "source": "Telegram/RUU6RS1whx44wa05b07NI3oHqgXOPG7HDetlVgf3fX7JKT0", "content": "", "creation_timestamp": "2026-08-25T00:00:07.482574Z"}]}