{"vulnerability": "cve-2026-3255", "sightings": [{"uuid": "0dd5adc7-c8e3-4d58-8f23-32779edbb925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfuu7hwlqs2x", "content": "", "creation_timestamp": "2026-02-27T23:24:45.944234Z"}, {"uuid": "a2049bdf-8963-472d-8331-0991eb79cce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3255", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfuuk6yvv62a", "content": "", "creation_timestamp": "2026-02-27T23:30:45.595863Z"}, {"uuid": "e159fff8-ca33-418f-93c3-d3d97352c9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32552", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mth2zkn3bg2v", "content": "\u8106\u5f31\u6027\u300cXYZ\u300d\u304c\u3001\u30a2\u30d7\u30ea\u300cABC\u300dv1.2.3\u306b\u5b58\u5728\u3002\u60c5\u5831\u6f0f\u6d29\u306e\u53ef\u80fd\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u500b\u4eba\u60c5\u5831\u3078\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3002\nCVE-2026-32552 CVSS 8.5 | HIGH", "creation_timestamp": "2026-08-19T15:42:10.250096Z"}, {"uuid": "014ee0fe-b6a8-45a1-b531-cf120b598005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32558", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtthnofrxi2e", "content": "CVE-2026-32558 - affiliate pro - affiliate program for woocommerce & wordpress\nThe Affiliate Pro add\u2011on for WordPress and WooCommerce (versions up to 8.9.1) lets anyone on the internet gain full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redefiningtheweb #CVE #infosec", "creation_timestamp": "2026-08-24T14:00:06.707937Z"}, {"uuid": "2481d320-279a-4ba7-965c-afa56096e114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32551", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtti2onuro2c", "content": "\ud83d\udea8 CVE-2026-32551 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-32551\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T14:07:23.189756Z"}, {"uuid": "e7e3a556-fb1f-468e-8d59-29e1f304d28f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32558", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtti2wpmhd2e", "content": "\ud83d\udea8 CVE-2026-32558 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-32558\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T14:07:32.468959Z"}, {"uuid": "d8306b70-0894-4bf4-ba29-97417ee11bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32558", "type": "seen", "source": "https://bsky.app/profile/yetikamp.bsky.social/post/3mtwcenoomv2b", "content": "CVE-2026-32558 is a critical 9.8 vulnerability in the Affiliate Program for WooCommerce & WordPress affecting versions up to 8.9.1. Patch immediately to prevent potential account takeover or data exposure.", "creation_timestamp": "2026-08-25T17:03:34.679620Z"}, {"uuid": "53f1ab71-c56f-4383-8a36-59c16d840697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32554", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtuft7ruze23", "content": "CVE-2026-32554\nThe WooBeWoo Product Filter Pro plugin (versions up to 3.1.8) allows anyone on the internet to send specially crafted requests that execute database commands. This could let attackers view, change, or delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:00:05.334088Z"}, {"uuid": "4bfd62d3-a71b-416c-b7ec-3522e7eb282a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtuftb6did2m", "content": "CVE-2026-32555\nThe Boost software up to version 2.0.4 can be tricked into executing database commands without any user authentication. This could let an outsider read, change, or delete your data. Upgrade Boost to a newer\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:00:06.787231Z"}, {"uuid": "3a3c4ca8-5312-4892-b3f0-a645d5135bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32559", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtugf2wbu72b", "content": "CVE-2026-32559\nThe file\u2011upload feature in UltimateAI version 3.1 and earlier does not properly check what is being uploaded. A malicious user could place a harmful file on your server, potentially gaining control or stealing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:10:04.287839Z"}, {"uuid": "7ccd333e-bea4-4bdc-93de-e4d2bfd13a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32554", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujlrwgno2f", "content": "\ud83d\udea8 CVE-2026-32554 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in WooBeWoo Product Filter Pro <= 3.1.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-32554\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:07:38.527898Z"}, {"uuid": "bea30bf5-a5d3-4c44-b9d8-8f5c8f1fd526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32559", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujmbkgok2j", "content": "\ud83d\udea8 CVE-2026-32559 \u2014 CVSS 9.9 CRITICAL\n\nSubscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-32559\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:07:46.860142Z"}, {"uuid": "3966bab9-2b6d-4c14-b258-8d9d3b065243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32555", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujlzxlnb25", "content": "\ud83d\udea8 CVE-2026-32555 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Boost <= 2.0.4 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-32555\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:07:42.026569Z"}, {"uuid": "879e010a-6f24-4d8c-8fad-01575bd5ff97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32556", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtummhkq2d2x", "content": "CVE-2026-32556 - Unauthenticated XSS in Boost <= 2.0.4. CVSS 7.1. Currently unpatched. Audit systems and mitigate risk immediately. #CVE #XSS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-32556/", "creation_timestamp": "2026-08-25T01:01:34.886101Z"}, {"uuid": "c89536ff-7e34-46d5-b976-4547d89f7cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32556", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117153444284574949", "content": "CVE-2026-32556 - Unauthenticated XSS in Boost <= 2.0.4. CVSS 7.1. Currently unpatched. Audit systems and mitigate risk immediately. #CVE #XSS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-32556/", "creation_timestamp": "2026-08-25T01:01:35.603525Z"}, {"uuid": "eee0dd65-f603-45f3-8601-51942d5eb10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32559", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-26T00:00:10.810371Z"}, {"uuid": "219dc9db-7e14-4f83-8652-89499efe146c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32555", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtunacz6fw2i", "content": "Critical SQL Injection Turns Boost Into Another Museum Exhibit\nPANIC 88% | Lag 0.0h | CVE-2026-32555 is an unauthenticated SQL injection affecting Boost versions 2.0.4 and below. A CVSS \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-25T01:12:41.144047Z"}, {"uuid": "8203b982-e438-41eb-b994-7196e8bb6de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32554", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtuoxwdnut2w", "content": "\u88fd\u54c1\u540d: Adobe Acrobat Reader \u8106\u5f31\u6027: \u8907\u6570 \u5f71\u97ff: \u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3001\u60c5\u5831\u6f0f\u6d29\u306e\u53ef\u80fd\u6027 \u653b\u6483\u8005: \u60aa\u610f\u306e\u3042\u308bPDF\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u304b\u305b\u3001PC\u3092\u4e57\u3063\u53d6\u308b\nCVE-2026-32554 CVSS 9.3 | CRITICAL", "creation_timestamp": "2026-08-25T01:43:46.750608Z"}, {"uuid": "0ee36172-0a87-4588-b85a-2091ac95f64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32556", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtusbppgqd23", "content": "Unpatched XSS: Another Victory Lap for Internet Frailty and Human Denial\nPANIC 52% | Lag 0.0h | CVE-2026-32556 is an unauthenticated XSS in Boost version 2.0.4 and earlier, rated CVSS 7.1 and curr\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-25T02:42:56.897679Z"}, {"uuid": "102681ce-aa22-45b7-b739-dad289bde72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32559", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.403222Z"}, {"uuid": "3c958cb9-91af-48e9-873e-feb0a9d8615e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32551", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttdqgolm62j", "content": "CVE-2026-32551 - woo essential\nThe Woo Essential add\u2011on for WordPress (versions up to 4.3.0) can be accessed by anyone on the internet to send specially crafted requests that execute commands in the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wooessential #divinext #CVE #infosec", "creation_timestamp": "2026-08-24T12:50:04.747942Z"}]}