{"vulnerability": "CVE-2026-96533", "sightings": [{"uuid": "3357d97a-4ab1-4775-b325-002eae345943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96533", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117337228938533400", "content": "CVE-2026-96533: HIGH severity SSRF in Testimonials Widget (<=4.0.4). Unauthenticated users can make the server fetch internal URLs, exposing responses \ud83d\udee1\ufe0f. Disable or restrict plugin until patched. https://radar.offseq.com/threat/cve-2026-96533-cwe-918-server-side-request-forgery-ssrf-in-testimonials-widget-de6ac216205e8c74 #OffSeq #WordPress #SSRF #Infosec", "creation_timestamp": "2026-09-26T12:00:26.296777Z"}, {"uuid": "0d51fe38-ff6c-4b38-bcb6-750aa571d534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96533", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwgae3z4e32q", "content": "HIGH severity SSRF (CVE-2026-96533) impacts Testimonials Widget <=4.0.4. Unauthenticated attackers can access internal services. Restrict or disable plugin until a fix. https://radar.offseq.com/threat/cve-2026-96533-cwe-918-server-side-request-forgery-ssrf-in-testimonials-widget-de6ac216205e8c74 ...", "creation_timestamp": "2026-09-26T12:00:28.443290Z"}]}