{"vulnerability": "cve-2026-7586", "sightings": [{"uuid": "b5b1d513-4ae5-475b-b116-cbbc2d32d4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtkjkevlxp2v", "content": "CVE-2026-75860: toma de control total en WordPress\n\nPlugin JSON Options en WordPress con CVE-2026-75860: cualquier atacante sin contrase\u00f1a puede tomar control total. Verific\u00e1 si tu sitio est\u00e1 expuesto ahora.\n\n#cve202675860 #jsonoptions #wordpress #escaladadeprivilegios #vulnerabilidadcr\u00edtica", "creation_timestamp": "2026-08-21T00:40:06.451855Z"}, {"uuid": "31accb5e-a35d-48fa-a3fc-4dda3f3944b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117126661700027750", "content": "CVE-2026-75860: CRITICAL privilege escalation in JSON Options \u22640.0.4. Unauthenticated attackers can update WordPress options & gain admin access. Remove or disable plugin until fix is available. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b89b1 #OffSeq #WordPress #CVE202675860", "creation_timestamp": "2026-08-20T07:30:25.140616Z"}, {"uuid": "489cdcdc-90f2-4e04-aa8d-90dfcac0f3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtipz7f4er27", "content": "JSON Options plugin (\u22640.0.4) hit by CRITICAL vuln (CVE-2026-75860): unauthenticated users can escalate to admin \u2014 full WordPress site takeover possible. Remove or restrict plugin now. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b...", "creation_timestamp": "2026-08-20T07:30:27.252679Z"}, {"uuid": "c1809561-3289-4de9-8dc2-84a89fb8b94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiyer75i523", "content": "CVE-2026-75860 - json options\nAn outdated WordPress plugin allows unauthenticated users to modify settings. This can lead to unauthorized user registration and potential site takeover. Update the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonoptions #unknown #CVE #infosec", "creation_timestamp": "2026-08-20T10:00:05.205702Z"}, {"uuid": "85d45f18-177b-4d42-b332-f8c307d39fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtj7hywmk523", "content": "\ud83d\udea8 CVE-2026-75860 \u2014 CVSS 9.8 CRITICAL\n\nThe JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T12:07:09.237529Z"}, {"uuid": "36d19c58-2392-42dd-a70f-8881a07d1a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75866", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/cgm4yobjpxdg7", "content": "CVE-2026-75866: Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them", "creation_timestamp": "2026-08-22T18:37:25.742102Z"}, {"uuid": "24a51c75-4fa2-4371-ba9c-a50d7c6ba730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mugjttrvhg2u", "content": "\ud83d\udd34 CVE-2026-75865 - Critical (9.8)\n\nThe WPLP Cookie Consent \u2013 Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75865/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T03:59:58.106665Z"}, {"uuid": "741e20fe-142e-4642-ac7d-b9e9b73a612c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mugk44tbld2w", "content": "Critical Cookie Banner Flaw, Because Even Consent Pages Bleed Out\nPANIC 78% | Lag 0.0h | A critical CVE-2026-75865 vulnerability has been reported in the WPLP Cookie Consent plugin, with a \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-01T04:04:34.177321Z"}, {"uuid": "7ceabdcb-4bda-488b-ba2a-e4d367237398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mugkarjvjb2b", "content": "\ud83d\udea8 CVE-2026-75865 \u2014 CVSS 9.8 CRITICAL\n\nThe WPLP Cookie Consent \u2013 Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin fo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75865\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T04:07:10.350623Z"}, {"uuid": "fd11fc0d-e510-4dad-b0e5-585ce08b3754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mugkfysm2k2e", "content": "CVE-2026-75865 - wplp cookie consent \u2013 cookie banner & consent management for gdpr, ccpa & google consent mode\nThe cookie consent plugin for WordPress can be tricked into accepting any file type, and the upload\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wplegalpages #CVE #infosec", "creation_timestamp": "2026-09-01T04:10:05.674323Z"}, {"uuid": "36c05908-7d51-46cd-ac8c-6490cc18f81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://t.me/GithubRedTeam/101195", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-75865\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 07:53:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload -> RCE in WPLP Cookie Consent (gdpr-cookie-consent) <= 4.4.1 - technical write-up and PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T09:00:05.216859Z"}, {"uuid": "7bec55c9-3fe3-4985-a31a-c4c7e446b1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "Telegram/dpgHxQKToET6DYqvRQ6MEfWshfz0qOTKTnxbqKSRBdQu0rw", "content": "", "creation_timestamp": "2026-09-05T22:00:05.857496Z"}, {"uuid": "83ae6f62-dde5-4358-923a-3e97b3d7903f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "Telegram/dpgHxQKToET6DYqvRQ6MEfWshfz0qOTKTnxbqKSRBdQu0rw", "content": "", "creation_timestamp": "2026-09-06T00:00:15.853821Z"}, {"uuid": "a3452a33-a545-44c7-8faf-3bc2f8c36983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101195", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-75865\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 07:53:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload -> RCE in WPLP Cookie Consent (gdpr-cookie-consent) <= 4.4.1 - technical write-up and PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:51.331609Z"}, {"uuid": "27f637c2-a553-4062-8ab8-0ad4d78c4e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75862", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mv6k4b43wm2y", "content": "Adobe Photoshop: RCE via DICOM JPEG (CVE-2026-75862) Patched in APSB26-130", "creation_timestamp": "2026-09-10T17:08:33.577265Z"}]}