{"vulnerability": "cve-2026-6495", "sightings": [{"uuid": "1a47028d-c2e0-427a-b729-f7b7053eecbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6495", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116594404656368136", "content": "\u26a0\ufe0f HIGH severity: Reflected XSS in Ajax Load More < 7.8.4 (CVE-2026-6495) lets attackers inject scripts as admin. No patch confirmed \u2014 restrict access, monitor for updates, and consider WAF rules. Details: https://radar.offseq.com/threat/cve-2026-6495-cwe-79-cross-site-scripting-xss-in-a-662ee7d0 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-18T07:30:27.406438Z"}, {"uuid": "686d5891-5fdf-468a-9042-a16795aab3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6495", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mm4e6qc5hu2m", "content": "Ajax Load More plugin < 7.8.4 hit by HIGH severity XSS (CVE-2026-6495) \u2014 attackers could run code as admin. No patch confirmed. Restrict access & monitor updates. Details: https://radar.offseq.com/threat/cve-2026-6495-cwe-79-cross-site-scripting-xss-in-a-662ee7d0 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-18T07:30:29.504319Z"}, {"uuid": "bee73a09-164d-4f33-b27c-09f31d06f06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6495", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm4jy4cgk72v", "content": "CVE-2026-6495 - Ajax Load More\nCVE ID : CVE-2026-6495\n \n Published : May 18, 2026, 7:16 a.m. | 55\u00a0minutes ago\n \n Description : The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflecte...", "creation_timestamp": "2026-05-18T09:14:09.126989Z"}, {"uuid": "ca32ad9e-3f3a-4197-8ba9-b8d784b7dc40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6495", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mn2vm4nsed2z", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-6495 Ajax Load More WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\uff08\u30d0\u30fc\u30b8\u30e7\u30f37.8.4\u4ee5\u524d\uff09\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u3001Ajax Load More WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f37.8.4\u4ee5\u524d\u306b\u5b58\u5728\u3057\u3001\u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u51fa\u529b\u3059\u308b\u969b\u306b\u9069\u5207\u306a\u30b5\u30cb\u30bf\u30a4\u30ba\u3068\u30a8\u30b9\u30b1\u30fc\u30d7\u304c\u884c\u308f\u308c\u306a\u3044\u305f\u3081\u3001", "creation_timestamp": "2026-05-30T11:02:04.351359Z"}]}