{"vulnerability": "cve-2026-1843", "sightings": [{"uuid": "6992fd48-6933-44ca-b631-4f6e23e68d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1843", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116068163886097864", "content": "", "creation_timestamp": "2026-02-14T09:00:32.101814Z"}, {"uuid": "733f485b-d50d-42b6-9313-72305b2b38c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1843", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mesnu4u5c72a", "content": "", "creation_timestamp": "2026-02-14T09:00:32.183550Z"}, {"uuid": "b6cd5825-2128-445d-94cc-e477ed98fcc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aql7cxekcqahl", "content": "CVE-2026-18435 - Kadence Blocks\nCVE ID : CVE-2026-18435\n \n Published : Aug. 1, 2026, 9:17 a.m. | 32\u00a0minutes ago\n \n Description : The Kadence Blocks \u2014 Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'toggleIcon' Bl...", "creation_timestamp": "2026-08-01T10:20:25.945983Z"}, {"uuid": "ada06d77-1cb0-4643-9553-5c9ad59cf0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18435", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzzamokip2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-18435 \u0432 Kadence Blocks: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0431\u043b\u043e\u043a toggleIcon\n\n\n\nhttps://kripta.biz/posts/21045193-FD26-4FC9-9E0B-62DDBBB5B617", "creation_timestamp": "2026-08-01T17:40:31.567741Z"}, {"uuid": "a15f63e3-85cd-4ab1-8731-f4fd209ae110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18435", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms24zda4ki22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-18435 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kadence Blocks \u0434\u043b\u044f WordPress: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437\n\n\n\nhttps://kripta.biz/posts/E634DA34-5D5C-4FCA-A24A-CC0A0645A7A2", "creation_timestamp": "2026-08-01T18:48:05.332529Z"}, {"uuid": "85ac33dd-9375-4405-b1fb-1109b8f209cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18435", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms252336k524", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea CVE-2026-18435: \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05e4\u05dc\u05d0\u05d2\u05d9\u05df Kadence Blocks \u05dc\u05d1\u05e0\u05d9\u05d9\u05ea \u05e2\u05de\u05d5\u05d3\u05d9\u05dd \u05d1\u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1\n\n\n\nhttps://khesef.xyz/posts/88460F2D-D979-40DE-8CFE-3F6A690AEF76", "creation_timestamp": "2026-08-01T18:48:26.425304Z"}, {"uuid": "d24bcf58-f503-43ec-9656-76b93e2164f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18432", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117105074151013340", "content": "CVE-2026-18432 (CVSS 9.8): CRITICAL privilege escalation in DynamiApps Frontend Admin <=3.29.9. Unauthenticated attackers can become admins via flawed user ID checks. Restrict access to vulnerable forms & endpoints. https://radar.offseq.com/threat/cve-2026-18432-cwe-269-improper-privilege-management-in-shabti-frontend-admin-by-dynamiapps-0c7e8a2e9b4496ea #OffSeq #WordPress #PrivilegeEscalation #CVE", "creation_timestamp": "2026-08-16T12:00:25.522146Z"}, {"uuid": "affa3f16-7b13-4c7c-8aae-22440b36b4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18432", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt75addh2j24", "content": "Critical flaw in DynamiApps Frontend Admin <=3.29.9 lets unauthenticated users escalate to admin via improper privilege checks. Restrict vulnerable endpoints & avoid public forms until patched. https://radar.offseq.com/threat/cve-2026-18432-cwe-269-improper-privilege-management-in-shabti-frontend...", "creation_timestamp": "2026-08-16T12:00:27.652629Z"}, {"uuid": "d7ec1db0-fce5-4ea0-a53c-d67c413acf80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18438", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4jfk7bhm2z", "content": "\ud83d\udfe0 CVE-2026-18438 - High (8.8)\n\nThe Templately \u2013 Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And C...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18438/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T11:00:08.616745Z"}, {"uuid": "1ca12cf2-3de7-48f6-8db3-c7dbb0520916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18438", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt4pogh5l72v", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cTemplately\u300d\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u304c\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u8106\u5f31\u6027\u3002\nCVE-2026-18438 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-15T12:52:28.171303Z"}, {"uuid": "9105dd34-67ff-4a35-b86f-998ceacc6565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18433", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m", "content": "\ud83d\udd17 CVE : CVE-2025-9486, CVE-2026-15216, CVE-2026-15217, CVE-2026-15423, CVE-2026-16494, CVE-2026-16627, CVE-2026-18244, CVE-2026-18433, CVE-2026-19228, CVE-2026-4879, CVE-2026-6821, CVE-2026-7427, CVE-2026-8667", "creation_timestamp": "2026-08-13T14:05:08.156855Z"}, {"uuid": "61ea0c19-8fe9-4cf6-9878-917e5bbe6497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18432", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt6ik2sv4v2e", "content": "CVE-2026-18432\nThe Frontend Admin plugin for WordPress has a security flaw that lets attackers gain access to administrator accounts. This can happen when a malicious user submits a specially crafted form on the website. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-16T05:50:05.349868Z"}, {"uuid": "3750d5f4-9b59-46e7-adb6-deeefc2cf71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18432", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6j4muboc22", "content": "\ud83d\udd34 CVE-2026-18432 - Critical (9.8)\n\nThe Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18432/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-16T06:00:28.538292Z"}, {"uuid": "2e1e3f19-376c-4589-b555-794531405178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtytdkid452a", "content": "CVE-2026-18431 - Critical Unauthenticated RCE in WordPress Avada theme & Fusion Builder via arbitrary file write. CVSS 9.8. Unpatched. Mitigate immediately. #CVE #WordPress #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-18431/", "creation_timestamp": "2026-08-26T17:12:31.003968Z"}, {"uuid": "61ecf426-d25b-40fc-942f-3ced645d0bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18431", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117162924477288099", "content": "CVE-2026-18431 - Critical Unauthenticated RCE in WordPress Avada theme & Fusion Builder via arbitrary file write. CVSS 9.8. Unpatched. Mitigate immediately. #CVE #WordPress #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-18431/", "creation_timestamp": "2026-08-26T17:12:31.926415Z"}]}