{"vulnerability": "CVE-2026-82222", "sightings": [{"uuid": "a062f690-3101-445a-97e3-b085df43d2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/509", "content": "poc: https://github.com/dinosn/givewp-cve-2026-82222-rce-lab", "creation_timestamp": "2026-08-30T14:00:04.528687Z"}, {"uuid": "ab0fec19-fce8-422b-93b6-81a61198f252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu72ott44y2f", "content": "CVE-2026-82222 - givewp\nThe GiveWP donation plugin for WordPress can be fooled by specially crafted information, allowing an attacker to insert malicious instructions that run on your site. This could give them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#givewp #CVE #infosec", "creation_timestamp": "2026-08-29T04:40:04.447533Z"}, {"uuid": "a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu5jwrpbtc24", "content": "\ud83d\udea8 CVE-2026-82222 \u2014 CVSS 10 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. T...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82222\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T14:07:37.838960Z"}, {"uuid": "8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu74dqrndj2u", "content": "\ud83e\udd16 CVE-2026-82222: RCE in the GiveWP WordPress donation plugin. Unauthenticated registration + unserialize gadget chain \u2192 arbitrary code execution. Fixed in 4.16.7.2.\nhttps://www.bleepingcomputer.com/news/security/givewp-wordpress-donation-plugin-flaw-lets-hackers-execute-server-commands/", "creation_timestamp": "2026-08-29T05:09:39.447897Z"}, {"uuid": "b2284380-2d4a-44b0-b8ff-bae4b4933f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/captainsmok3r_official/506", "content": "GiveWP WordPress donation plugin has a CVSS 10 RCE flaw. CVE-2026-82222: unauthenticated PHP object injection via deserialization. Affects <= 4.16.7.1", "creation_timestamp": "2026-08-29T00:00:07.107418Z"}, {"uuid": "f93647f6-874e-4e07-acf7-e90351568f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3mu6uv3gyfa2f", "content": "GiveWP CVE-2026-82222: RCE Chain from Unauthenticated Registration to PHP Object Injection https://cstu.io/36a669 #tecnologia #python #google", "creation_timestamp": "2026-08-29T02:56:11.806762Z"}, {"uuid": "9101bdf6-b58e-4c45-8724-83d8835f09af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100304", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-82222-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a UdinChan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 01:54:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic PoC for CVE-2026-82222\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-30T07:00:04.767427Z"}, {"uuid": "17d57ec9-93be-4a0f-a5a5-2f07ddf55c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100326", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a givewp-cve-2026-82222-rce-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 05:23:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAuthorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-30T09:00:06.397429Z"}, {"uuid": "121c2e13-67e2-4911-aa4e-b608c47c281d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muc6kho37s2h", "content": "Daily IT Security Digest \u2014 2026-08-30\nbeing actively exploited in the wild.\n   Source: https://infosec.exchange/@beyondmachines1/117183879688482251\n\n5. **GiveWP Maximum-Severity RCE (CVE-2026-82222)**\n   GiveWP, a widely used WordPress donation plugin, released an emergency update to fix a critical", "creation_timestamp": "2026-08-30T10:27:11.466726Z"}]}