{"vulnerability": "cve-2026-13440", "sightings": [{"uuid": "33417d9c-6866-4238-a4af-0c85b85608d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13440", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrpngwmbxe23", "content": "WordPress\u7528StoreGrowth\u30d7\u30e9\u30b0\u30a4\u30f32.1.0\u4ee5\u4e0b\u306bStored XSS\u306e\u8106\u5f31\u6027\u3002\u5165\u529b\u691c\u8a3c\u4e0d\u8db3\u306e\u305f\u3081\u3001\u975e\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u57cb\u3081\u8fbc\u307f\u3001\u30da\u30fc\u30b8\u95b2\u89a7\u30e6\u30fc\u30b6\u30fc\u306b\u5b9f\u884c\u3055\u305b\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-13440 CVSS 7.2 | HIGH", "creation_timestamp": "2026-07-28T14:42:41.152798Z"}, {"uuid": "832ea322-c735-4738-bf4d-73ad180f5a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13440", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrpvv2eqdh23", "content": "CVE-2026-13440 - Stored XSS in StoreGrowth WooCommerce. Unauthenticated inject scripts via message_popup. CVSS 7.2. No patch. Remove plugin until update. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-13440/", "creation_timestamp": "2026-07-28T17:13:44.566342Z"}]}