{"vulnerability": "cve-2026-1661", "sightings": [{"uuid": "300f4f1d-818b-4735-b01f-0a8f84a95037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnsz3jvs2r", "content": "CVE-2026-16610 - admin and site enhancements (ase) pro\nA WordPress plugin called Admin and Site Enhancements Pro has a security flaw that allows attackers to run code on your website without needing a password. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ase #CVE #infosec", "creation_timestamp": "2026-07-30T05:00:05.234142Z"}, {"uuid": "03829c2c-210a-4c3f-b8de-2f5a84d0710f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpluu52j", "content": "Daily IT Security Digest \u2014 2026-07-30\nvendor patches immediately and review network exposure. [Source](https://securityonline.bsky.social)\n\n## 4. ASE Pro WordPress Plugin Critical RCE (CVE-2026-16610)\n\nThe ASE Pro plugin (version \u22648.9.0) for WordPress has a critical remote code execution", "creation_timestamp": "2026-07-30T05:02:09.700083Z"}, {"uuid": "6795f59a-a818-4d96-a41c-a9994925342f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpuffg2e", "content": "Daily IT Security Digest \u2014 2026-07-30\ntracked as CVE-2026-16610 (CWE-434). Unauthenticated attackers can execute arbitrary code if the `[post_cf_form]` shortcode is publicly available. The vulnerability affects a significant portion of WordPress deployments. Site owners should update to the latest", "creation_timestamp": "2026-07-30T05:02:10.175897Z"}, {"uuid": "567f5676-9ddb-43af-869e-b8e2c34844c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtr7a4afg2l", "content": "\ud83d\udd34 CVE-2026-16610 - Critical (9.8)\n\nThe Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16610/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T06:00:36.738121Z"}, {"uuid": "f5c32fd6-3da0-4f39-be30-f30b4d4e00b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16610", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrtm5z3l4c2i", "content": "CRITICAL RCE in ASE Pro WordPress plugin (\u22648.9.0): Unauthenticated attackers can run code if [post_cf_form] is public. Patch or disable now. https://radar.offseq.com/threat/cve-2026-16610-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ase-admin-and-site-9666b4d559bc4aea #OffSeq #WordP...", "creation_timestamp": "2026-07-30T04:30:27.398421Z"}, {"uuid": "8b8e8654-6404-4349-aa05-d5cd79a9ec56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16614", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-16614 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GSheetConnector: \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress\n\n\n\nhttps://kripta.biz/posts/13CD3DFD-7882-468B-B71C-5981D4823F80", "creation_timestamp": "2026-08-01T17:35:34.952936Z"}, {"uuid": "0ce55aaf-7da0-48d8-af81-b869fa5b2187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16614", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22", "content": "CVE-2026-16614: \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1-GSheetConnector \u05e9\u05dc \u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05d6\u05e8\u05e7\u05ea SQL \u05dc\u05de\u05e0\u05d4\u05dc\u05d9\u05dd \u05d1\u05dc\u05d1\u05d3\n\n\n\nhttps://khesef.xyz/posts/4D11FCD9-26A8-4B04-A629-87A33E2111F9", "creation_timestamp": "2026-08-01T17:36:07.186203Z"}, {"uuid": "c7baf00d-a067-4847-b4ee-8cbd7c452ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16618", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbpr42iup2l", "content": "CVE-2026-16618 - improve seo\nAn outdated version of the Improve SEO WordPress plugin does not properly check files uploaded to the site, potentially allowing malicious users to upload and execute PHP\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#improveseo #unknown #CVE #infosec", "creation_timestamp": "2026-08-04T19:12:05.023599Z"}, {"uuid": "10690809-9e25-4072-8247-b531b87be924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16614", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms25qqoie32n", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1-GSheetConnector: \u05db\u05d9\u05e6\u05d3 \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05d4\u05d0\u05ea\u05e8 \u05e9\u05dc\u05da \u05de\u05e4\u05e0\u05d9 CVE-2026-16614\n\n\n\nhttps://khesef.xyz/posts/01CC5B68-D25A-4E8F-BC3C-916E34CBF0C8", "creation_timestamp": "2026-08-01T19:01:07.274267Z"}, {"uuid": "88ee2b10-64e0-445d-9247-e833e553c60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16614", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms25pv6bzb2v", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-16614 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GSheetConnector: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 Google Sheets \u0447\u0435\u0440\u0435\u0437 WordPress\n\n\n\nhttps://kripta.biz/posts/FA08F865-0904-4786-AA42-5940AF1426FB", "creation_timestamp": "2026-08-01T19:00:39.886408Z"}, {"uuid": "84b6bdcf-8f86-4b4f-a372-ce34af8109ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16615", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrawnpprzw2a", "content": "CVE-2026-16615 - Librest: weak random number generation in pkce implementation\nCVE ID : CVE-2026-16615\n \n Published : 22 juillet 2026 17:16 | 29\u00a0minutes ago\n \n Description : A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function fr...", "creation_timestamp": "2026-07-22T18:17:36.171479Z"}]}