{"vulnerability": "cve-2026-1191", "sightings": [{"uuid": "0f958303-4ec4-45a7-80c1-53739a952e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1191", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md6c4hy45i2c", "content": "", "creation_timestamp": "2026-01-24T13:12:00.510631Z"}, {"uuid": "9d3d8ba7-72b3-40b5-b2f8-5088b8e1a4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11911", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mopnmxu4ut2i", "content": "HIGH severity flaw in eemitch Simple File List \u22646.3.7 enables unauth file deletion via AJAX, risking RCE. Restrict admin-ajax.php or disable the plugin until patch. Details: https://radar.offseq.com/threat/cve-2026-11911-cwe-22-improper-limitation-of-a-pat-c1bb6257a58c2645 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-06-20T10:30:29.512031Z"}, {"uuid": "ac6a32b9-e495-4446-acea-e593a6067167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11911", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116781968685290768", "content": "CVE-2026-11911: HIGH severity path traversal in eemitch Simple File List (\u22646.3.7). Unauth attackers can delete files via exposed AJAX action, risking RCE. Restrict admin-ajax.php or disable plugin. Details: https://radar.offseq.com/threat/cve-2026-11911-cwe-22-improper-limitation-of-a-pat-c1bb6257a58c2645 #OffSeq #WordPress #Security", "creation_timestamp": "2026-06-20T10:30:34.153738Z"}, {"uuid": "e8e5d694-d4d3-4951-996a-263f91896b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mops2wgxvv2e", "content": "CVE-2026-11911 - Simple File List\nCVE ID : CVE-2026-11911\n \n Published : June 20, 2026, 8:29 a.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL...", "creation_timestamp": "2026-06-20T11:49:52.256549Z"}, {"uuid": "47d037f5-9fb8-4959-9a34-db2f077d4e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11912", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mopsmtdged2h", "content": "CVE-2026-11912 - Simple File List\nCVE ID : CVE-2026-11912\n \n Published : June 20, 2026, 8:29 a.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all v...", "creation_timestamp": "2026-06-20T11:59:52.578788Z"}, {"uuid": "a30db5f8-1525-4478-bd8c-2664e1cf0c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11912", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mopsnvc2xj2l", "content": "HIGH severity (CVSS 7.5): eemitch Simple File List \u22646.3.7 lets unauthenticated attackers modify/delete server files. No official fix \u2014 restrict or disable plugin until patched. https://radar.offseq.com/threat/cve-2026-11912-cwe-862-missing-authorization-in-ee-9819171d864aac20 #OffSeq #WordPress #...", "creation_timestamp": "2026-06-20T12:00:31.631399Z"}, {"uuid": "bcfa0f2c-5868-4b06-9a4a-9b7a4003c6ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11912", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116782322552113074", "content": "CVE-2026-11912: HIGH severity vulnerability in eemitch Simple File List \u22646.3.7 lets unauthenticated attackers modify/delete server files due to missing auth checks. No patch yet \u2014 restrict or disable plugin. https://radar.offseq.com/threat/cve-2026-11912-cwe-862-missing-authorization-in-ee-9819171d864aac20 #OffSeq #WordPress #vuln", "creation_timestamp": "2026-06-20T12:00:39.074621Z"}, {"uuid": "f44e1760-56a9-4d44-8fba-91a9622ccd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moqb67alv32q", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3Simple File List\uff086.3.7\u4ee5\u524d\uff09\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3067\u304d\u308b\u8106\u5f31\u6027\u3002wp-config.php\u524a\u9664\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-11911 CVSS 7.5 | HIGH", "creation_timestamp": "2026-06-20T16:20:07.909722Z"}, {"uuid": "c73d6519-04bd-4d31-a51d-1b0bfacdf89e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11912", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moqbarje2p2d", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cSimple File List\u300d\u306b\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u30fb\u5909\u66f4\u3067\u304d\u308b\u3002\nCVE-2026-11912 CVSS 7.5 | HIGH", "creation_timestamp": "2026-06-20T16:21:34.018614Z"}, {"uuid": "9edd2ee8-f08b-42ec-97a6-68002310a32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mov2kqoxi627", "content": "CVE-2026-11911 - RCE in Simple File List WordPress plugin. Unauthenticated arbitrary file deletion via insufficient path validation. CVSS 7.5. No patch exists. Update or disable immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-11911/", "creation_timestamp": "2026-06-22T14:05:11.867773Z"}, {"uuid": "fb03fc24-00b1-49a6-a342-f68ac668971c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11915", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqddwmsobx2q", "content": "CVE-2026-11915 - Brute force attack protection - Critical - Unsupported - SA-CONTRIB-2026-047\nCVE ID : CVE-2026-11915\n \n Published : July 10, 2026, 11:16 p.m. | 32\u00a0minutes ago\n \n Description : vulnerability in Drupal Brute force attack protection allows . This issue affects Br...", "creation_timestamp": "2026-07-10T23:55:21.436598Z"}, {"uuid": "13437199-38f8-42ce-a93e-7e46b349e3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqddzmsacg2e", "content": "CVE-2026-11913 - Mother May I - Critical - Unsupported - SA-CONTRIB-2026-045\nCVE ID : CVE-2026-11913\n \n Published : July 10, 2026, 11:16 p.m. | 32\u00a0minutes ago\n \n Description : vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions: *.*.\n \n Sever...", "creation_timestamp": "2026-07-10T23:57:02.175251Z"}, {"uuid": "1c475543-b70c-4fd7-a519-1afde78a3c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11914", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqdelpyuob24", "content": "CVE-2026-11914 - Composer - Critical - Unsupported - SA-CONTRIB-2026-046\nCVE ID : CVE-2026-11914\n \n Published : July 10, 2026, 11:16 p.m. | 32\u00a0minutes ago\n \n Description : vulnerability in Drupal Composer allows . This issue affects Composer versions: *.*.\n \n Severity: 0.0 | N...", "creation_timestamp": "2026-07-11T00:07:09.354187Z"}, {"uuid": "8988a35e-09f2-4f6d-9fac-dfd1b2c26c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11915", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdr236uki26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11915 \u0432 Drupal: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0440\u0443\u0442\u0444\u043e\u0440\u0441-\u0430\u0442\u0430\u043a \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/92DB86E8-77A9-4EEC-8B37-90ADF7CF334C", "creation_timestamp": "2026-07-11T03:49:56.032479Z"}, {"uuid": "9e7793f5-42b7-48e7-8018-c7f05b8c30a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11913", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdr3yv7f72c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11913 \u0432 Drupal Mother May I: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CB923790-3E03-4F9A-9143-438DE2C12A3E", "creation_timestamp": "2026-07-11T03:51:01.266136Z"}, {"uuid": "69c8b2e2-2eb1-41f6-8bdb-26997e156e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11914", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdr6qaasz2s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-11914 \u0432 Drupal Composer: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/728490D5-4909-47A1-93F9-EC8BE65C27B2", "creation_timestamp": "2026-07-11T03:52:32.458548Z"}, {"uuid": "30d1fba0-842e-4d5b-b589-0987b59d6338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11913", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkhjasyrv2t", "content": "CVE-2026-11913 - drupal/mothermayi\nA known security issue in Drupal remains unfixed by the project's maintainer, leaving users vulnerable. To maintain the project and fix the issue,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#drupal #Packagisthttpspackagesdrupalorg8 #CVE #infosec", "creation_timestamp": "2026-07-13T19:48:05.757783Z"}]}