{"vulnerability": "cve-2026-4241", "sightings": [{"uuid": "5b31b158-b36d-4281-8842-c08a892c117e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkmvtgppe32t", "content": "CVE-2026-42412 - WordPress WP User Frontend plugin\nCVE ID : CVE-2026-42412\n \n Published : April 29, 2026, 9:16 a.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Se...", "creation_timestamp": "2026-04-29T10:38:29.750612Z"}, {"uuid": "c6315004-aef7-4d33-9515-45380bc7856a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42410", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm76sgru3z2u", "content": "CVE-2026-42410 thegem-elements-elementor (CVSS Score 6.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-19T10:32:06.737935Z"}, {"uuid": "815eebed-25c8-4439-b4ea-8a66f8ecc677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42412", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm7c5tys652h", "content": "CVE-2026-42412 wp-user-frontend (CVSS Score 5.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-19T11:32:11.311534Z"}, {"uuid": "9a3d9795-3e40-4be7-b3e1-b115fd3a865a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393144240761553", "content": "CVE-2026-42417 (CRITICAL): ARMember Premium <= 7.8 is vulnerable to unauthenticated SQL Injection (CWE-89). No mitigation yet \u2014 review deployments & monitor databases closely. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21ef978d1d38 #OffSeq #Vulnerability #SQLInjection #WordPress", "creation_timestamp": "2026-10-06T09:00:26.167471Z"}, {"uuid": "3491f6ca-a2ed-4d44-93a1-794feff6e0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx72xgtcgb2j", "content": "CRITICAL SQL Injection in ARMember Premium <= 7.8 (CVE-2026-42417) allows unauthenticated exploitation. No fix yet \u2014 audit your sites and restrict access. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21e...", "creation_timestamp": "2026-10-06T09:00:28.304797Z"}, {"uuid": "ffa7e3c9-4aae-4802-b6ed-ce4bc335b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tvfzxs2l", "content": "\ud83d\udea8 CVE-2026-42417 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in ARMember Premium <= 7.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42417\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:10:03.575295Z"}, {"uuid": "0846c4fc-0376-4acf-b4e5-636def78d48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tnht5m2o", "content": "\ud83d\udea8 CVE-2026-42415 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:55.465641Z"}, {"uuid": "5f05d20c-c0c5-4742-954a-b8b2907ac64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393498184652638", "content": "CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality \u22643.9.3. Unauthenticated attackers can steal sensitive data. No official patch yet \u2014 restrict access ASAP. https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b18a06bf1443 #OffSeq #CVE202642415 #Infosec #WordPress #SQLInjection", "creation_timestamp": "2026-10-06T10:30:26.803951Z"}, {"uuid": "dd55d37b-d8ed-4428-a03c-e6d17f4c47c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx77yfdbua2a", "content": "CRITICAL: Porto Theme - Functionality \u22643.9.3 vulnerable to unauthenticated SQL injection (CVE-2026-42415). Patch status unconfirmed \u2014 restrict access now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b...", "creation_timestamp": "2026-10-06T10:30:28.668949Z"}, {"uuid": "68263d8a-dd6c-492d-b958-5508d1c0e4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuooysk27", "content": "CVE-2026-42415 - porto theme - functionality\nThe Porto theme\u2019s Functionality plugin (versions up to 3.9.3) can be accessed by anyone on the internet to insert malicious database queries. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pthemes #CVE #infosec", "creation_timestamp": "2026-10-07T21:40:05.536528Z"}, {"uuid": "e7552608-5ef9-4285-a957-aab5cf3a7ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcwgjgtyj24", "content": "CVE-2026-42417 - armember premium\nThe ARMember Premium add\u2011on for WordPress can be accessed by anyone on the internet without logging in, allowing them to send specially crafted requests\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#armemberpremium #reputeinfosystems #CVE #infosec", "creation_timestamp": "2026-10-07T21:50:04.309591Z"}]}