{"vulnerability": "CVE-2026-76613", "sightings": [{"uuid": "38d1b5f1-9d37-4901-b33b-b7d8bd9c9617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmnpx6ct52t", "content": "CVE-2026-76613 - yootheme pro extension for joomla\nThe YOOtheme Pro extension for Joomla (versions 1.0.0 to 5.0.40) lets users with contributor rights add crafted content that changes the website's database. This could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-21T21:00:07.633288Z"}, {"uuid": "fb7524d7-64ed-4a54-867f-9643f87fea32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtlwnw47fs23", "content": "\ud83d\udea8 CVE-2026-76613 \u2014 CVSS 9.2 CRITICAL\n\nJoomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76613\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T14:07:23.057528Z"}, {"uuid": "a77b0039-1524-4610-94f6-f3689f5080d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/yootheme.bsky.social/post/3mtlx6e2yo22p", "content": "\ud83d\udea8 Critical security update for YOOtheme\n\nWe fixed 2 vulnerabilities:\n\nCVE-2026-75115: Arbitrary file read (contributor-level)\nCVE-2026-76613: SQL injection (contributor-level)\n\nUpdate YOOtheme immediately to 5.0.41 if untrusted users have permission to create articles.", "creation_timestamp": "2026-08-21T14:16:35.272942Z"}, {"uuid": "7d518497-8ece-404b-b892-5400059dcccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jda5phzqedbeq", "content": "CVE-2026-76613 - Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40\nCVE ID : CVE-2026-76613\n \n Published : Aug. 21, 2026, 1:18 p.m. | 31\u00a0minutes ago\n \n Description : Joomla Extension - yootheme.com - Authenticated, privileged...", "creation_timestamp": "2026-08-21T14:43:31.734322Z"}]}