{"metadata": {"vulnerability": "cve-2026-7330", "count": 17, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 10}}, "data": [{"timestamp": "2026-04-28T18:53:39.258Z", "date_only": false, "value": "2026-04-28T18:53:39.258Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-7330", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-29T21:23:13Z", "date_only": false, "value": "2026-04-29T21:23:13.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2026-7330", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-05-07T20:01:52Z", "date_only": false, "value": "2026-05-07T20:01:52.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2026-7330", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-05-08T08:26:33.373Z", "date_only": false, "value": "2026-05-08T08:26:33.373Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-7330", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-08T08:26:33.373Z", "date_only": false, "value": "2026-05-08T08:26:33.373Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2026-7330", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-08T09:00:29.100Z", "date_only": false, "value": "2026-05-08T09:00:29.100807Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116538135511321220", "record": "cve-2026-7330", "field": "creation_timestamp", "uuid": "068741bc-30a6-4ca9-a533-1e3b34aabd47", "content": "\ud83d\udee1\ufe0f CVE-2026-7330: HIGH severity stored XSS in thedark Auto Affiliate Links (\u22646.8.8) lets unauthenticated attackers inject scripts via AJAX endpoint. WP admins at risk \u2014 update/disable plugin! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #Infosec #XSS", "url": "https://infosec.exchange/users/offseq/statuses/116538135511321220"}, {"timestamp": "2026-05-08T09:00:30.644Z", "date_only": false, "value": "2026-05-08T09:00:30.644159Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mldekif4rj2y", "record": "cve-2026-7330", "field": "creation_timestamp", "uuid": "4cb5e13d-497f-45e8-b621-48d389a89517", "content": "HIGH severity XSS in thedark Auto Affiliate Links (\u22646.8.8) allows unauthenticated script injection into WP admin stats. Update or disable plugin immediately! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #XSS", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mldekif4rj2y"}, {"timestamp": "2026-05-08T09:16:10Z", "date_only": false, "value": "2026-05-08T09:16:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V3RV-7VGJ-HQ3V", "record": "GHSA-V3RV-7VGJ-HQ3V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-08T09:16:10.100Z", "date_only": false, "value": "2026-05-08T09:16:10.100", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7330", "record": "FKIE_CVE-2026-7330", "field": "published"}, {"timestamp": "2026-05-08T09:31:30Z", "date_only": false, "value": "2026-05-08T09:31:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V3RV-7VGJ-HQ3V", "record": "GHSA-V3RV-7VGJ-HQ3V", "field": "published"}, {"timestamp": "2026-05-08T09:31:30Z", "date_only": false, "value": "2026-05-08T09:31:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V3RV-7VGJ-HQ3V", "record": "GHSA-V3RV-7VGJ-HQ3V", "field": "modified"}, {"timestamp": "2026-05-08T13:04:05.999Z", "date_only": false, "value": "2026-05-08T13:04:05.999970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlds63aujy2h", "record": "CVE-2026-7330", "field": "creation_timestamp", "uuid": "44b018a6-db4f-47a8-b0bb-416fb45d974f", "content": "CVE-2026-7330 - Auto Affiliate Links\nCVE ID : CVE-2026-7330\n \n Published : May 8, 2026, 9:16 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This i...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlds63aujy2h"}, {"timestamp": "2026-05-08T14:26:57.015Z", "date_only": false, "value": "2026-05-08T14:26:57.015073Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-7330", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-08T14:26:57.015Z", "date_only": false, "value": "2026-05-08T14:26:57.015073Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7330", "record": "FKIE_CVE-2026-7330", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-08T21:28:08.223Z", "date_only": false, "value": "2026-05-08T21:28:08.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-7330", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-08T21:28:08.223Z", "date_only": false, "value": "2026-05-08T21:28:08.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-7330", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T11:02:13.063Z", "date_only": false, "value": "2026-06-17T11:02:13.063", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-7330", "record": "FKIE_CVE-2026-7330", "field": "lastModified"}]}