{"vulnerability": "CVE-2026-39797", "sightings": [{"uuid": "084f2d7c-04d8-4476-867d-feb0f070ec0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39797", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76t5vkkd2r", "content": "\ud83d\udea8 CVE-2026-39797 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-39797\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:39.175383Z"}, {"uuid": "a97750e4-a400-4eca-bd65-2b459ec69115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39797", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvcsnqdh2z", "content": "CVE-2026-39797 - gdpr framework by data443\nThe GDPR Framework plugin for WordPress (versions up to 2.5.0) can be accessed by anyone on the internet and used to insert malicious data that may let an attacker execute code on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T21:30:05.778351Z"}]}