{"vulnerability": "cve-2026-9280", "sightings": [{"uuid": "21094c3c-6fd4-4650-9470-5c9faa53f2d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9280", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlwlciikb2d", "content": "CVE-2026-9280 - Ad Inserter\nCVE ID : CVE-2026-9280\n \n Published : June 6, 2026, 4:17 a.m. | 15\u00a0minutes ago\n \n Description : The Ad Inserter \u2013 Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Parameters in iframe Mode in ...", "creation_timestamp": "2026-06-06T05:34:45.794514Z"}, {"uuid": "ee4e735a-2e19-4385-8e4e-1d907173106a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9280", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mo2xmhmahi26", "content": "Wordfence CVE-2026-9280: XSS reflejado en Ad Inserter\n\nWordfence CVE-2026-9280 expone tu WordPress con Ad Inserter a XSS reflejado. Parchealo en 5 minutos actualizando a la versi\u00f3n 2.8.16 antes de que te rob...\n\n#cve20269280 #wordfence #adinserter #xss #wordpress", "creation_timestamp": "2026-06-12T05:03:40.294908Z"}, {"uuid": "7a4195b7-6989-4c1d-b7c1-3d40029498df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9280", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mo3cga76ni22", "content": "CVE-2026-9280 ad-inserter (CVSS Score 6.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #ad-inserter", "creation_timestamp": "2026-06-12T08:16:36.586941Z"}, {"uuid": "c690cb0e-d628-46ad-ab06-cbce13ffc5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92808", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo5qy6odp24", "content": "CVE-2026-92808 - altium enterprise server\nThe UnifiedLogin component of Altium Enterprise Server can be made to send web requests to any address the attacker chooses. By pretending to be an internal request, an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#altium #CVE #infosec", "creation_timestamp": "2026-09-16T22:10:06.958650Z"}, {"uuid": "4bc916cc-668e-414d-892f-c2cd4042ffb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92808", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5rqd45v2w", "content": "\ud83d\udea8 CVE-2026-92808 \u2014 CVSS 10 CRITICAL\n\nA server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92808\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:10:30.138545Z"}, {"uuid": "9327efb3-f2f6-4383-b0fc-89ec5929a34a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92805", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5ttqaqe25", "content": "\ud83d\udea8 CVE-2026-92805 \u2014 CVSS 9.3 CRITICAL\n\nUVdesk Community Skeleton through 1.1.8 fails to authenticate or validate installation state on wizard endp...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92805\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:11:40.793230Z"}, {"uuid": "4671504d-4e13-49d4-8813-fd48ae3cd5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92805", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvodwatgdz2n", "content": "CVE-2026-92805 - community-skeleton\nThe installation wizard in UVdesk Community Skeleton (versions up to 1.1.8) does not check who is using it. An untrusted user could change the database connection\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#communityskeleton #uvdesk #CVE #infosec", "creation_timestamp": "2026-09-17T00:00:24.091644Z"}, {"uuid": "40e52a9d-e1e5-49a5-b8d3-163635fdbc48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92805", "type": "seen", "source": "Telegram/aa12xjkUGHK8rkGot1A_VCrMtALnxL4i5jF0jOgTLfDyVn0", "content": "", "creation_timestamp": "2026-09-18T04:00:06.564778Z"}, {"uuid": "a1197397-05ca-4cbb-be8f-182dbf6b5fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92805", "type": "published-proof-of-concept", "source": "Telegram/sREDAe6BOKB9_RGSs3URiy3vPAWvfip9ao8nlCE9pHlx5C0", "content": "", "creation_timestamp": "2026-09-18T04:00:05.654423Z"}, {"uuid": "6ccca310-739a-41e4-9caf-be0be475c0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92805", "type": "published-proof-of-concept", "source": "Telegram/aa12xjkUGHK8rkGot1A_VCrMtALnxL4i5jF0jOgTLfDyVn0", "content": "", "creation_timestamp": "2026-09-19T00:00:38.726495Z"}, {"uuid": "425b52ed-8c1d-4435-a313-8e84c1349802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92806", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtv247q2y25", "content": "CVE-2026-92806 - phplist\nIn phpList versions earlier than 3.6.17, the page that removes multiple subscribers does not check that the request really comes from the admin\u2019s own session. A tricked administrator who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#phplist #CVE #infosec", "creation_timestamp": "2026-09-19T04:50:05.861985Z"}, {"uuid": "92c909d3-09c1-47ea-ba31-f5a6e98fc9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92807", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117296177232528367", "content": "CVE-2026-92807: HIGH severity (CVSS 8.8) code injection in pdfcrowd Save as PDF Plugin for WordPress (<=4.6.1). Contributor+ users can run arbitrary PHP \u2014 risking API credential leaks & server compromise. Restrict access, monitor for patch. https://radar.offseq.com/threat/cve-2026-92807-cwe-94-improper-control-of-generation-of-code-code-injection-in-pdfcrowd-save-as-pdf-bd60570e4aef57a5 #OffSeq #WordPress #Infosec", "creation_timestamp": "2026-09-19T06:00:26.951314Z"}, {"uuid": "4fe75d9b-b0bd-4bb8-b425-f37b221aa1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92807", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvtyxx7lxm24", "content": "CVE-2026-92807: HIGH severity code injection in pdfcrowd Save as PDF Plugin (<=4.6.1). Contributor+ users can execute PHP code. Restrict access, consider disabling plugin until patched. https://radar.offseq.com/threat/cve-2026-92807-cwe-94-improper-control-of-generation-of-code-code-injection-in-...", "creation_timestamp": "2026-09-19T06:00:31.845867Z"}, {"uuid": "acb03af1-6956-42e7-9f35-38a99d524089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92807", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4jiaxfv2b", "content": "\ud83d\udfe0 CVE-2026-92807 - High (8.8)\n\nThe Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invoc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92807/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:03:58.960630Z"}, {"uuid": "0e3450bc-dda5-4233-a085-f8b9ffcb66dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92807", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117330424741303656", "content": "CVE-2026-92807 PDFCrowd Save as PDF WP plugin, all versions to 4.6.1: arbitrary function invocation via pdf_created_callback, CVSS 8.8. No patch yet, so disable the plugin. Details: https://www.valtersit.com/cve/CVE-2026-92807/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-25T07:10:06.053086Z"}, {"uuid": "104aca5a-8ddd-4eab-9395-d6b36e3a8a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92807", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwdarny3g425", "content": "CVE-2026-92807 PDFCrowd Save as PDF WP plugin, all versions to 4.6.1: arbitrary function invocation via pdf_created_callback, CVSS 8.8. No patch yet, so disable the plugin. Details: https://www.valtersit.com/cve/CVE-2026-92807/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-25T07:30:04.075297Z"}]}