{"vulnerability": "CVE-2026-78570", "sightings": [{"uuid": "44755d13-887a-42f9-86c8-08f58b13b2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwrbaj4ti24", "content": "CVE-2026-78570 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into gaining full admin rights on your site. This means an attacker could change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T21:30:06.195529Z"}, {"uuid": "09815151-aaf8-4a16-8617-c0aa79f08662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155680980822160", "content": "KlbTheme Total Donations <=2.0.5 has a CRITICAL privilege escalation vuln (CVE-2026-78570, CVSS 9.8). Unauthenticated attackers can gain admin access. No patch yet \u2014 disable/remove plugin & monitor for advisories. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 #OffSeq #WordPress #CVE #Vuln", "creation_timestamp": "2026-08-25T10:30:24.560245Z"}, {"uuid": "5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvmfnixbs2y", "content": "CRITICAL: KlbTheme Total Donations <=2.0.5 allows unauthenticated privilege escalation (CVE-2026-78570). No patch available \u2014 remove or disable plugin to reduce risk. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 ...", "creation_timestamp": "2026-08-25T10:30:26.797323Z"}, {"uuid": "2872c671-969c-43df-b226-3666bb91d0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvrt57gtb2j", "content": "\ud83d\udea8 CVE-2026-78570 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78570\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T12:07:27.164270Z"}]}