{"vulnerability": "cve-2026-66672", "sightings": [{"uuid": "d766055c-fa2c-4462-8118-4ec92587a945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66672", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjeo6vs4c2f", "content": "CVE-2026-66672 - flatastic\nThe Flatastic theme for WordPress, in any version up to 2.0, can be tricked by anyone on the Internet into running their own code on your site. This could let an attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flatastic #monkeysan #CVE #infosec", "creation_timestamp": "2026-08-20T13:40:06.326137Z"}, {"uuid": "4a000d97-4227-4789-b592-c29a68d87836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66672", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjgawzwhx2y", "content": "\ud83d\udea8 CVE-2026-66672 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Flatastic <= 2.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66672\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T14:08:28.484876Z"}]}