{"vulnerability": "CVE-2021-47933", "sightings": [{"uuid": "5d735263-2f27-45cb-93a7-dc9f1344c629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlj7ns3ojt2p", "content": "CVE-2021-47933 - WordPress MStore API 2.0.6 Arbitrary File Upload\nCVE ID : CVE-2021-47933\n \n Published : May 10, 2026, 1:16 p.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated att...", "creation_timestamp": "2026-05-10T16:48:50.476866Z"}, {"uuid": "8d69c6a7-708e-41a1-9268-73bb3eea05f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47933", "type": "seen", "source": "https://t.me/shimiscyberworld/1335", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2021-47933 \u2014 CVSS 9.8\nWordPress MStore API Critical RCE: Unauthenticated File Upload\n\nCVE-2021-47933 \u2014 WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2021-47933 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:10.814766Z"}, {"uuid": "3cfe644f-7908-4280-ba48-be8aa3f3eca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47933", "type": "seen", "source": "https://t.me/shimiscyberworld/1340", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-10\n\n\ud83d\udcca 15 vulnerabilities detected today \u2014 5 \ud83d\udd34 Critical, 10 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2021-47923 (9.8) \u2014 OpenCart 3.0.3.8 Session Fixation Vulnerability\u2026\n  \u2022 CVE-2021-47932 (9.8) \u2014 WordPress TheCartPress Unauthenticated Admin Creation\u2026\n  \u2022 CVE-2021-47933 (9.8) \u2014 WordPress MStore API Critical RCE: Unauthenticated File\u2026\n  \u2022 CVE-2021-47936 (9.8) \u2014 OpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n  \u2022 CVE-2021-47940 (9.8) \u2014 WordPress Plugin Download From Files: Critical\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2021-47935 (8.8) \u2014 Sentry 8.2.0 RCE: Authenticated Superusers Can Execute\u2026\n  \u2022 CVE-2021-47937 (8.8) \u2014 e107 CMS RCE (CVE-2021-47937) Allows Authenticated Theme\u2026\n  \u2022 CVE-2021-47938 (8.8) \u2014 ImpressCMS 1.4.2 RCE: Authenticated Attackers Can Execute\u2026\n  \u2022 CVE-2021-47939 (8.8) \u2014 Evolution CMS RCE (CVE-2021-47939) Allows Authenticated\u2026\n  \u2022 CVE-2021-47943 (8.8) \u2014 TextPattern CMS RCE (CVE-2021-47943) Allows Authenticated\u2026\n  \u2022 CVE-2021-47949 (8.8) \u2014 CyberPanel 2.1 RCE via Symlink Attack (CVE-2021-47949)\n  \u2022 CVE-2022-50944 (8.8) \u2014 Aero CMS 0.0.1 Vulnerability Allows Authenticated PHP Code\u2026\n  \u2022 CVE-2021-47928 (8.2) \u2014 Opencart TMD Vendor System Blind SQLi Exposes User Data\n  \u2022 CVE-2021-47930 (8.2) \u2014 CVE-2021-47930: Unauthenticated SQLi in Balbooa Joomla\u2026\n  \u2022 CVE-2021-47941 (8.2) \u2014 WordPress Plugin Survey & Poll SQLi Puts Data at Risk\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:08.684985Z"}, {"uuid": "995a3ec2-0b9b-4cab-9f2f-2c723f399d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47933", "type": "seen", "source": "https://t.me/shimiscyberworld/1335", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2021-47933 \u2014 CVSS 9.8\nWordPress MStore API Critical RCE: Unauthenticated File Upload\n\nCVE-2021-47933 \u2014 WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2021-47933 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:41.131820Z"}, {"uuid": "9efb8683-185f-4982-afd9-45a74748de8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47933", "type": "seen", "source": "https://t.me/shimiscyberworld/1340", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-10\n\n\ud83d\udcca 15 vulnerabilities detected today \u2014 5 \ud83d\udd34 Critical, 10 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2021-47923 (9.8) \u2014 OpenCart 3.0.3.8 Session Fixation Vulnerability\u2026\n  \u2022 CVE-2021-47932 (9.8) \u2014 WordPress TheCartPress Unauthenticated Admin Creation\u2026\n  \u2022 CVE-2021-47933 (9.8) \u2014 WordPress MStore API Critical RCE: Unauthenticated File\u2026\n  \u2022 CVE-2021-47936 (9.8) \u2014 OpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n  \u2022 CVE-2021-47940 (9.8) \u2014 WordPress Plugin Download From Files: Critical\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2021-47935 (8.8) \u2014 Sentry 8.2.0 RCE: Authenticated Superusers Can Execute\u2026\n  \u2022 CVE-2021-47937 (8.8) \u2014 e107 CMS RCE (CVE-2021-47937) Allows Authenticated Theme\u2026\n  \u2022 CVE-2021-47938 (8.8) \u2014 ImpressCMS 1.4.2 RCE: Authenticated Attackers Can Execute\u2026\n  \u2022 CVE-2021-47939 (8.8) \u2014 Evolution CMS RCE (CVE-2021-47939) Allows Authenticated\u2026\n  \u2022 CVE-2021-47943 (8.8) \u2014 TextPattern CMS RCE (CVE-2021-47943) Allows Authenticated\u2026\n  \u2022 CVE-2021-47949 (8.8) \u2014 CyberPanel 2.1 RCE via Symlink Attack (CVE-2021-47949)\n  \u2022 CVE-2022-50944 (8.8) \u2014 Aero CMS 0.0.1 Vulnerability Allows Authenticated PHP Code\u2026\n  \u2022 CVE-2021-47928 (8.2) \u2014 Opencart TMD Vendor System Blind SQLi Exposes User Data\n  \u2022 CVE-2021-47930 (8.2) \u2014 CVE-2021-47930: Unauthenticated SQLi in Balbooa Joomla\u2026\n  \u2022 CVE-2021-47941 (8.2) \u2014 WordPress Plugin Survey & Poll SQLi Puts Data at Risk\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:41.718126Z"}]}