{"metadata": {"vulnerability": "CVE-2026-12415", "count": 22, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-06-16T15:59:27.954Z", "date_only": false, "value": "2026-06-16T15:59:27.954Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-12415", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-26T16:05:32Z", "date_only": false, "value": "2026-06-26T16:05:32.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-12415", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-06-27T04:30:30.508Z", "date_only": false, "value": "2026-06-27T04:30:30.508Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12415", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-27T04:30:30.508Z", "date_only": false, "value": "2026-06-27T04:30:30.508Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-12415", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-27T05:16:41Z", "date_only": false, "value": "2026-06-27T05:16:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F3Q2-677P-C93V", "record": "GHSA-F3Q2-677P-C93V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-27T05:16:41.620Z", "date_only": false, "value": "2026-06-27T05:16:41.620", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12415", "record": "FKIE_CVE-2026-12415", "field": "published"}, {"timestamp": "2026-06-27T06:00:26.237Z", "date_only": false, "value": "2026-06-27T06:00:26.237747Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mparsjsyrw2u", "record": "cve-2026-12415", "field": "creation_timestamp", "uuid": "a81aa25f-79da-4bb8-9853-5743340d865e", "content": "CRITICAL: pravel Invoice Generator \u22641.0.0 lets unauthenticated attackers hijack any WordPress account \u2014 incl. admins \u2014 via exposed AJAX. Disable plugin or block pravel_invoice_edit_account() now. https://radar.offseq.com/threat/cve-2026-12415-cwe-269-improper-privilege-manageme-3c4b296b228a674f #...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mparsjsyrw2u"}, {"timestamp": "2026-06-27T06:18:24.840Z", "date_only": false, "value": "2026-06-27T06:18:24.840931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpassotsjd2s", "record": "CVE-2026-12415", "field": "creation_timestamp", "uuid": "44caef33-7d96-4393-9a19-849a5d4e67af", "content": "CVE-2026-12415 - Invoice Generator\nCVE ID : CVE-2026-12415\n \n Published : June 27, 2026, 4:30 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpassotsjd2s"}, {"timestamp": "2026-06-27T06:25:12.707Z", "date_only": false, "value": "2026-06-27T06:25:12.707889Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpat6tjh6z2g", "record": "CVE-2026-12415", "field": "creation_timestamp", "uuid": "c32b69ef-05bc-4f30-a86e-67d7e387218b", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cInvoice Generator\u300d\uff08v1.0.0\u307e\u3067\uff09\u3067\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u4efb\u610f\u306e\u30e6\u30fc\u30b6\u30fc\uff08\u7ba1\u7406\u8005\u542b\u3080\uff09\u306e\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3092\u5909\u66f4\u3057\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4e57\u3063\u53d6\u308b\u3053\u3068\u304c\u53ef\u2026\nCVE-2026-12415 CVSS 9.8 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mpat6tjh6z2g"}, {"timestamp": "2026-06-27T06:30:26Z", "date_only": false, "value": "2026-06-27T06:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F3Q2-677P-C93V", "record": "GHSA-F3Q2-677P-C93V", "field": "published"}, {"timestamp": "2026-06-27T06:30:26Z", "date_only": false, "value": "2026-06-27T06:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F3Q2-677P-C93V", "record": "GHSA-F3Q2-677P-C93V", "field": "modified"}, {"timestamp": "2026-06-27T14:16:09.060Z", "date_only": false, "value": "2026-06-27T14:16:09.060758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpbniwrmxv2i", "record": "CVE-2026-12415", "field": "creation_timestamp", "uuid": "ee686b89-94a2-4553-890d-9b0fddd4f6fa", "content": "CVE-2026-12415 invoice-creator (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "url": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpbniwrmxv2i"}, {"timestamp": "2026-06-27T15:00:41.658Z", "date_only": false, "value": "2026-06-27T15:00:41.658070Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpbpylejhg2g", "record": "CVE-2026-12415", "field": "creation_timestamp", "uuid": "0cf453f4-6f34-4a3d-a4e5-2908721ba4ad", "content": "\ud83d\udd34 CVE-2026-12415 - Critical (9.8)\n\nThe Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12415/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpbpylejhg2g"}, {"timestamp": "2026-06-29T13:13:55.004Z", "date_only": false, "value": "2026-06-29T13:13:55.004055Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12415", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-29T13:13:55.004Z", "date_only": false, "value": "2026-06-29T13:13:55.004055Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12415", "record": "FKIE_CVE-2026-12415", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-29T13:14:02.661Z", "date_only": false, "value": "2026-06-29T13:14:02.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-12415", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-29T13:14:02.661Z", "date_only": false, "value": "2026-06-29T13:14:02.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12415", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-29T18:40:23.203Z", "date_only": false, "value": "2026-06-29T18:40:23.203", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12415", "record": "FKIE_CVE-2026-12415", "field": "lastModified"}, {"timestamp": "2026-06-29T19:23:18.779Z", "date_only": false, "value": "2026-06-29T19:23:18.779818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7m2c4ry25", "record": "CVE-2026-12415", "field": "creation_timestamp", "uuid": "149f7e46-3d67-4afd-8bbe-28948de6db3d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12415 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Invoice Generator \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/18B86939-6C43-42AB-A5D1-49A9F0CBBF44", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7m2c4ry25"}, {"timestamp": "2026-06-29T19:23:25.198Z", "date_only": false, "value": "2026-06-29T19:23:25.198379Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mph7ma7npb2k", "record": "CVE-2026-12415", "field": "creation_timestamp", "uuid": "a21a9d9a-2bb5-4fe6-b33a-1d6c300394de", "content": "WordPress\u63d2\u4ef6\u6f0f\u6d1e\u8b66\u544a:Invoice Generator\u63d2\u4ef6\u5b58\u5728\u7279\u6743\u63d0\u5347\u98ce\u9669(CVE-2026-12415)\n\n\n\nhttps://qian.cx/posts/A4E57BE2-D7D8-4BFF-933F-561D57FB07E8", "url": "https://bsky.app/profile/qiancx.bsky.social/post/3mph7ma7npb2k"}, {"timestamp": "2026-07-16T19:00:30.573Z", "date_only": false, "value": "2026-07-16T19:00:30.573265Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cp2rVOV36WL3kV8x4_ScnxuKP0fsnO5ojw1d2EB8ZtBxrfQ", "record": "CVE-2026-12415", "field": "creation_timestamp", "uuid": "504df5de-4efa-430f-9e1a-74e47eef5a00"}, {"timestamp": "2026-07-18T03:00:03.402Z", "date_only": false, "value": "2026-07-18T03:00:03.402808Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cp2rVOV36WL3kV8x4_ScnxuKP0fsnO5ojw1d2EB8ZtBxrfQ", "record": "CVE-2026-12415", "field": "creation_timestamp", "uuid": "beacebb0-30ad-43e7-97ab-f5f61ab10aa0"}]}