{"metadata": {"vulnerability": "CVE-2026-87115", "count": 19, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-09-08T20:45:54.127Z", "date_only": false, "value": "2026-09-08T20:45:54.127Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-87115", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-08T21:01:02Z", "date_only": false, "value": "2026-09-08T21:01:02.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-87115", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-02T17:35:22Z", "date_only": false, "value": "2026-10-02T17:35:22.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-87115", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-03T06:38:23.319Z", "date_only": false, "value": "2026-10-03T06:38:23.319Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-87115", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-03T06:38:23.319Z", "date_only": false, "value": "2026-10-03T06:38:23.319Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-87115", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-03T07:16:48Z", "date_only": false, "value": "2026-10-03T07:16:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X82W-X82X-7998", "record": "GHSA-X82W-X82X-7998", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-03T07:16:48.347Z", "date_only": false, "value": "2026-10-03T07:16:48.347", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87115", "record": "FKIE_CVE-2026-87115", "field": "published"}, {"timestamp": "2026-10-03T07:30:23.575Z", "date_only": false, "value": "2026-10-03T07:30:23.575486Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117375803253707843", "record": "cve-2026-87115", "field": "creation_timestamp", "uuid": "6f60c301-1e29-44f5-8cfd-45f6dad5d126", "content": "VikAppointments Booking Calendar plugin (<=1.2.21) for WordPress is vulnerable to CRITICAL path traversal (CVE-2026-87115). Unauth attackers can delete files, risking RCE. Check for File-type fields & secure your site! https://radar.offseq.com/threat/cve-2026-87115-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-59a71fc6e6540921 #OffSeq #WordPress #CVE202687115", "url": "https://infosec.exchange/users/offseq/statuses/117375803253707843"}, {"timestamp": "2026-10-03T07:30:25.891Z", "date_only": false, "value": "2026-10-03T07:30:25.891684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwxejoa2xt2j", "record": "cve-2026-87115", "field": "creation_timestamp", "uuid": "c00f0545-bb50-4dc7-ad6f-4461d2c585f2", "content": "VikAppointments Booking Calendar (<=1.2.21) has a CRITICAL path traversal bug \u2014 unauth attackers could delete server files, risking RCE. Audit your File-type fields and restrict access now. Details: https://radar.offseq.com/threat/cve-2026-87115-cwe-22-improper-limitation-of-a-pathname-to-a-restr...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwxejoa2xt2j"}, {"timestamp": "2026-10-03T07:53:19.513Z", "date_only": false, "value": "2026-10-03T07:53:19.513310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7favkybxkbj5d", "record": "CVE-2026-87115", "field": "creation_timestamp", "uuid": "277c873c-4852-4e26-97b6-12aab84c8419", "content": "CVE-2026-87115 - VikAppointments Services Booking Calendar\nCVE ID : CVE-2026-87115\n \n Published : Oct. 3, 2026, 6:38 a.m. | 45\u00a0minutes ago\n \n Description : The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insuff...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/7favkybxkbj5d"}, {"timestamp": "2026-10-03T08:07:05.998Z", "date_only": false, "value": "2026-10-03T08:07:05.998800Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwxglaxuxc2h", "record": "CVE-2026-87115", "field": "creation_timestamp", "uuid": "a74a27bf-3310-4036-bd72-d7a607881056", "content": "\ud83d\udea8 CVE-2026-87115 \u2014 CVSS 9.1 CRITICAL\n\nThe VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-87115\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwxglaxuxc2h"}, {"timestamp": "2026-10-03T09:31:17Z", "date_only": false, "value": "2026-10-03T09:31:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X82W-X82X-7998", "record": "GHSA-X82W-X82X-7998", "field": "published"}, {"timestamp": "2026-10-03T09:31:17Z", "date_only": false, "value": "2026-10-03T09:31:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X82W-X82X-7998", "record": "GHSA-X82W-X82X-7998", "field": "modified"}, {"timestamp": "2026-10-03T15:24:59.440Z", "date_only": false, "value": "2026-10-03T15:24:59.440128Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87115", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-03T15:24:59.440Z", "date_only": false, "value": "2026-10-03T15:24:59.440128Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87115", "record": "FKIE_CVE-2026-87115", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-03T15:33:35.671Z", "date_only": false, "value": "2026-10-03T15:33:35.671810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwy7jn3zs32g", "record": "CVE-2026-87115", "field": "creation_timestamp", "uuid": "bc086d7b-fe8f-4d88-a07b-3433a6ea0b53", "content": "\ud83d\udd34 CVE-2026-87115 - Critical (9.1)\n\nThe VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary fil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87115/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwy7jn3zs32g"}, {"timestamp": "2026-10-03T15:42:42.039Z", "date_only": false, "value": "2026-10-03T15:42:42.039Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-87115", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-03T15:42:42.039Z", "date_only": false, "value": "2026-10-03T15:42:42.039Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-87115", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-06T15:04:52.637Z", "date_only": false, "value": "2026-10-06T15:04:52.637", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87115", "record": "FKIE_CVE-2026-87115", "field": "lastModified"}]}