{"vulnerability": "cve-2026-16985", "sightings": [{"uuid": "7d5a555c-d5be-4a25-9feb-70830299b3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16985", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117070392510526892", "content": "CVE-2026-16985: Squeeze WP plugin <1.7.12 has a CRITICAL vuln \u2014 users with upload_files can upload PHP files, enabling remote code execution. Restrict permissions, monitor uploads, and check for updates. https://radar.offseq.com/threat/cve-2026-16985-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-squeeze-a1de64d348b6591f #OffSeq #WordPress #CVE2026_16985 #infosec", "creation_timestamp": "2026-08-10T09:00:25.483777Z"}, {"uuid": "ac0c69ef-39c1-472d-911c-86544c96ba1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16985", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mspqewvccx2n", "content": "Squeeze WP plugin pre-1.7.12: CRITICAL vuln allows PHP file uploads by users with upload_files rights \u2014 risk of remote code exec. Limit permissions & monitor uploads now. https://radar.offseq.com/threat/cve-2026-16985-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-squeeze-a1de64d348b6...", "creation_timestamp": "2026-08-10T09:00:27.743268Z"}]}