{"vulnerability": "cve-2026-6203", "sightings": [{"uuid": "b919ea8f-fc83-43ab-a05b-ecd15e021f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgam3hz7s2o", "content": "", "creation_timestamp": "2026-04-14T01:37:24.395831Z"}, {"uuid": "2ca72e7d-b44a-43c6-9f9b-0f67f64ac2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6203", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6203.yaml", "content": "", "creation_timestamp": "2026-04-14T06:22:16.000000Z"}, {"uuid": "383bf910-8631-434a-b138-42b3f3695d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6203", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjks6khlik23", "content": "", "creation_timestamp": "2026-04-15T21:02:43.746818Z"}, {"uuid": "8e7f03cf-9135-468a-bd66-73b412e5e291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6203", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjqwdtxele2u", "content": "", "creation_timestamp": "2026-04-18T07:33:08.180990Z"}, {"uuid": "2e882b10-4fda-4b22-a072-76f7c3d564c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62032", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkiut7d6c2h", "content": "\ud83d\udea8 CVE-2026-62032 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62032\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:08:49.454630Z"}, {"uuid": "3c4cd015-c447-4de5-95c8-d2a72e3cb4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62032", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418459894285612", "content": "CVE-2026-62032 WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62032https://patchstack.com/database/wordpress/plugin/directorypress/vulnerability/wordpress-directorypress-plugin-3-6-27-local-file-inclusion-vulnerability?_s_id=cve#Designinvento #DirectoryPress#CVE_2026_62032#bot", "creation_timestamp": "2026-10-10T20:18:32.267204Z"}, {"uuid": "ec19a553-8768-44f0-b590-8fb91c47a610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62030", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418454610461675", "content": "CVE-2026-62030 WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62030https://patchstack.com/database/wordpress/plugin/streamcast/vulnerability/wordpress-streamcast-plugin-2-4-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve#bPlugins #StreamCast#CVE_2026_62030#bot", "creation_timestamp": "2026-10-10T20:17:11.707582Z"}, {"uuid": "f8cd0ed8-dd78-40bc-a6df-178bd77731e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62031", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418457255198843", "content": "CVE-2026-62031 WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability Unauthenticated SQL Injection in uListing <= 2.2.0 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62031https://patchstack.com/database/wordpress/plugin/ulisting/vulnerability/wordpress-ulisting-plugin-2-2-0-sql-injection-vulnerability?_s_id=cve#Stylemix #uListing#CVE_2026_62031#bot", "creation_timestamp": "2026-10-10T20:17:51.709913Z"}, {"uuid": "d12555af-6f56-487d-a935-d95ea65aaa00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62033", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418462535262825", "content": "CVE-2026-62033 WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability Subscriber Settings Change in uListing <= 2.2.0 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62033https://patchstack.com/database/wordpress/plugin/ulisting/vulnerability/wordpress-ulisting-plugin-2-2-0-settings-change-vulnerability?_s_id=cve#Stylemix #uListing#CVE_2026_62033#bot", "creation_timestamp": "2026-10-10T20:19:13.012881Z"}, {"uuid": "2d79e052-1b4d-4a7f-914e-a80093ed3de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62034", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418465179391643", "content": "CVE-2026-62034 WordPress Before After Image Comparison \u2013 Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison \u2013 Image comparison for WP <= 1.1.21 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62034https://patchstack.com/database/wordpress/plugin/before-after-image-compare/vulnerability/wordpress-before-after-image-comparison-image-comparison-for-wp-plugin-1-1-21-cross-site-scripting-xss-vulnerability?_s_id=cve#bPlugins #BeforeAfterImageComparison\u2013ImagecomparisonforWP#CVE_2026_62034#bot", "creation_timestamp": "2026-10-10T20:19:52.739674Z"}, {"uuid": "cb678d2e-71a3-4431-a7f8-210dc53e7d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62035", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418467825380129", "content": "CVE-2026-62035 WordPress AWS S3 for WordPress Plugin \u2013 Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability Subscriber Broken Access Control in AWS S3 for WordPress Plugin \u2013 Upcasted <= 3.1.0 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62035https://patchstack.com/database/wordpress/plugin/upcasted-s3-offload/vulnerability/wordpress-aws-s3-for-wordpress-plugin-upcasted-plugin-3-1-0-broken-access-control-vulnerability?_s_id=cve#upcasted #AWSS3forWordPressPlugin\u2013Upcasted#CVE_2026_62035#bot", "creation_timestamp": "2026-10-10T20:20:33.094370Z"}, {"uuid": "5ffc8cd8-1faa-477a-9dbd-d981786b1652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62037", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418470468139266", "content": "CVE-2026-62037 WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62037https://patchstack.com/database/wordpress/plugin/document-emberdder/vulnerability/wordpress-document-embedder-plugin-2-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve#bPlugins #DocumentEmbedder#CVE_2026_62037#bot", "creation_timestamp": "2026-10-10T20:21:13.403067Z"}, {"uuid": "0a3f4114-4604-4942-9092-17a7cf1af125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62038", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117418473116861964", "content": "CVE-2026-62038 WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62038https://patchstack.com/database/wordpress/plugin/eroom-zoom-meetings-webinar/vulnerability/wordpress-eroom-plugin-1-7-1-broken-authentication-vulnerability?_s_id=cve#DigitalME #eRoom#CVE_2026_62038#bot", "creation_timestamp": "2026-10-10T20:21:54.570816Z"}, {"uuid": "3f504f97-3b39-4d89-8490-7be85447bb89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62031", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkezxjb5c2r", "content": "CVE-2026-62031 - ulisting\nThe uListing plugin for WordPress, up to version 2.2.0, can be accessed by anyone on the internet to send specially crafted requests that make the site\u2019s database execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ulisting #stylemix #CVE #infosec", "creation_timestamp": "2026-10-10T21:00:06.723723Z"}, {"uuid": "24073dc0-e7c8-4410-86aa-60db07086115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62031", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxkiuljxf22l", "content": "\ud83d\udea8 CVE-2026-62031 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in uListing <= 2.2.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62031\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T22:08:41.201728Z"}, {"uuid": "980f842d-eeec-4ae5-a9b2-a385a1f01311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62032", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxkflruizs2w", "content": "CVE-2026-62032 - directorypress\nThe DirectoryPress add\u2011on for WordPress (versions up to 3.6.27) lets anyone on the internet request files from your server without logging in. This could expose\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#directorypress #designinvento #CVE #infosec", "creation_timestamp": "2026-10-10T21:10:05.079981Z"}]}