{"vulnerability": "cve-2026-4264", "sightings": [{"uuid": "7fc515b7-0de8-412a-b909-67868d96a263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mknes2jicx2t", "content": "CVE-2026-42646 - WordPress TaxoPress plugin\nCVE ID : CVE-2026-42646\n \n Published : April 29, 2026, 12:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Steve Burge TaxoPress si...", "creation_timestamp": "2026-04-29T15:06:09.612107Z"}, {"uuid": "9fe7b1c8-940b-416f-9137-d3eaa52faacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mknd5xzt7p2n", "content": "CVE-2026-42642 - WordPress GiveWP plugin\nCVE ID : CVE-2026-42642\n \n Published : April 29, 2026, 12:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Lev...", "creation_timestamp": "2026-04-29T14:37:02.135616Z"}, {"uuid": "98e9b176-1d02-4781-9188-6338acf62b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42648", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkndbszbdj2q", "content": "CVE-2026-42648 - WordPress Spectra plugin\nCVE ID : CVE-2026-42648\n \n Published : April 29, 2026, 12:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Conf...", "creation_timestamp": "2026-04-29T14:39:11.208095Z"}, {"uuid": "ac7fe814-3ac2-4e78-a151-d5f2980822d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42644", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkndpdahgy2p", "content": "CVE-2026-42644 - WordPress BetterDocs plugin\nCVE ID : CVE-2026-42644\n \n Published : April 29, 2026, 12:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs...", "creation_timestamp": "2026-04-29T14:46:44.361501Z"}, {"uuid": "951c148d-293c-4df4-8aee-e756f449205a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkne2obrr22e", "content": "CVE-2026-42645 - WordPress Barcode Scanner with Inventory & Order Manager plugin\nCVE ID : CVE-2026-42645\n \n Published : April 29, 2026, 12:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of \"UKR Solution\") Barc...", "creation_timestamp": "2026-04-29T14:53:08.075600Z"}, {"uuid": "e02cc040-a2e9-46c5-91a9-a81aa8ff1a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mknej3z3t22p", "content": "CVE-2026-42641 - WordPress Share This Image plugin\nCVE ID : CVE-2026-42641\n \n Published : April 29, 2026, 12:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Server-Side Request Forgery (SSRF) vulnerability in ILLID Share This Image share-this-image allows Server Side Request ...", "creation_timestamp": "2026-04-29T15:01:08.967893Z"}, {"uuid": "5f4a93eb-262d-49f5-b213-4f322dc7009b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42643", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mknfvuivj52q", "content": "CVE-2026-42643 - WordPress Image Widget plugin\nCVE ID : CVE-2026-42643\n \n Published : April 29, 2026, 12:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP Image Widge...", "creation_timestamp": "2026-04-29T15:26:11.185132Z"}, {"uuid": "33a675f3-30eb-452b-a6c9-2bbc53249c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42646", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqzns2lab2t", "content": "\ud83d\udfe0 CVE-2026-42646 - High (7.6)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42646/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-01T01:57:35.534268Z"}, {"uuid": "78d86bc5-ecd2-48ad-a7c6-ee94809ea8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42640", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm4hopjxot2s", "content": "CVE-2026-42640 classified-listing (CVSS Score 5.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-18T08:33:06.060284Z"}, {"uuid": "d0258c55-9716-4f84-a2de-ebe0be68ad56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42649", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm73h6o3dx2i", "content": "CVE-2026-42649 favicon-rotator (CVSS Score 7.2) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-19T09:32:07.833360Z"}, {"uuid": "ef6069d6-fd6f-48df-9805-8dbacbe6d5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42647", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm7iucobhh2c", "content": "CVE-2026-42647 joomsport-sports-league-results-management (CVSS Score 7.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-19T13:32:07.141619Z"}, {"uuid": "d60f641d-80b9-47f7-95da-f781b370d4a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42647", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/455", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-42647\n\n\nhttps://patchstack.com/database/wordpress/plugin/joomsport-sports-league-results-management/vulnerability/wordpress-joomsport-plugin-5-7-7-sql-injection-vulnerability\n\n\nFofa : body=\"wp-content/plugins/joomsport-sports-league-results-management\" && (body=\"joomsport-sports-league-results-management\" && body=\"joomsport\")\n\nShodan : http.html:\"wp-content/plugins/joomsport-sports-league-results-management\" && http.html:\"joomsport-sports-league-results-management\" && http.html:\"joomsport\"\n\nEnjoy;", "creation_timestamp": "2026-06-01T22:00:28.000000Z"}, {"uuid": "0b058bdc-651c-47a9-a19a-e028676e5c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42647", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2deooi642b", "content": "\ud83d\udd34 CVE-2026-42647 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42647/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T23:00:59.356947Z"}, {"uuid": "0e6e08bf-c0ae-4824-ab02-ac81c687c756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo2ma7c2l62j", "content": "CVE-2026-42647 - WordPress JoomSport plugin\nCVE ID : CVE-2026-42647\n \n Published : 2026\u5e746\u670811\u65e5 22:16 | 2\u00a0\u5c0f\u65f6\uff0c49\u00a0\u5206\u949f ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beardev JoomSport allows Blind SQL Inject...", "creation_timestamp": "2026-06-12T01:39:32.367440Z"}, {"uuid": "48617e68-1bc0-4f05-bb54-27e0b00fc377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42647", "type": "published-proof-of-concept", "source": "Telegram/UUlhUbRH-lM0c2HkqQ_nuE7VUmZM0B1Eg2dBpWy1dBuIGV4", "content": "", "creation_timestamp": "2026-06-13T19:00:11.000000Z"}, {"uuid": "79051dd3-ed96-401f-8e09-b33b6c9e0543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42647", "type": "seen", "source": "https://t.me/GithubRedTeam/88673", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42647-Lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rootdirective-sec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 16:30:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:42.838854Z"}, {"uuid": "9785487e-1745-40ec-b248-8ba23798f7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42647", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88673", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42647-Lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rootdirective-sec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 16:30:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.572906Z"}]}