{"vulnerability": "cve-2026-66650", "sightings": [{"uuid": "b128830a-8478-4060-acd1-8a916e34ea36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66650", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttecfeanv2e", "content": "CVE-2026-66650 - freightco\nThe FreightCo theme for WordPress, versions up to 1.1.15, can be accessed by anyone on the internet to inject malicious data that causes the server to execute unwanted commands.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freightco #themerex #CVE #infosec", "creation_timestamp": "2026-08-24T13:00:07.343191Z"}, {"uuid": "6ebe5530-e318-497e-bd67-930dfaa81714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66650", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtti3qsszv24", "content": "\ud83d\udea8 CVE-2026-66650 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in FreightCo &lt;= 1.1.15 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66650\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T14:07:59.994088Z"}, {"uuid": "cc878127-7ec9-47dc-a07d-9d3e574bdf3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j74wude7nx7px", "content": "CVE-2026-66650 - WordPress FreightCo theme\nCVE ID : CVE-2026-66650\n \n Published : Aug. 24, 2026, 11:54 a.m. | 6\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in FreightCo &lt;= 1.1.15 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for more details,...", "creation_timestamp": "2026-08-24T12:26:46.724274Z"}]}