{"vulnerability": "CVE-2026-8778", "sightings": [{"uuid": "a68f6018-ccfe-45a4-ad72-8095d89634f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8778", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117250524688517116", "content": "CVE-2026-8778 (CRITICAL): MIPL Grouped Checkout Fields for WooCommerce \u22641.2.2 suffers from unrestricted file upload due to missing file type validation. Remote code execution possible by unauthenticated attackers. Restrict uploads & monitor! https://radar.offseq.com/threat/cve-2026-8778-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-mulika-mipl-grouped-checkout-a571f695f51796b8 #OffSeq #WordPress #CVE20268778", "creation_timestamp": "2026-09-11T04:30:24.421167Z"}, {"uuid": "06061966-1ded-4324-a017-fc962dc8e83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8778", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv7q7l5alo2f", "content": "CVE-2026-8778: MIPL Grouped Checkout Fields for WooCommerce \u22641.2.2 has a CRITICAL file upload flaw. Unauthenticated RCE risk. Restrict file uploads & monitor activity until patch available. https://radar.offseq.com/threat/cve-2026-8778-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-mu...", "creation_timestamp": "2026-09-11T04:30:27.164110Z"}, {"uuid": "f14f4a65-dfcd-453c-826b-1e61d8c1d40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7ussmrf3ldcui", "content": "CVE-2026-8778 - MIPL Grouped Checkout Fields for WooCommerce\nCVE ID : CVE-2026-8778\n \n Published : Sept. 11, 2026, 4:18 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The MIPL Grouped Checkout Fields for WooCommerce \u2013 Customize & Organize Checkout Fields. plugin for WordPr...", "creation_timestamp": "2026-09-11T05:41:56.914305Z"}, {"uuid": "5ce4137d-41c4-4c70-af58-44cf61cbfefc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8778", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7v7zxqq62p", "content": "CVE-2026-8778 - mipl grouped checkout fields for woocommerce. customize & organize checkout fields.\nThe MIPL Grouped Checkout Fields plugin for WordPress can accept files without checking what they are. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mulika #CVE #infosec", "creation_timestamp": "2026-09-11T06:00:10.515502Z"}, {"uuid": "0c4c6b3d-8836-427a-90a2-3d5d51bc4d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8778", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7vmhbowk22", "content": "\ud83d\udea8 CVE-2026-8778 \u2014 CVSS 9.8 CRITICAL\n\nThe MIPL Grouped Checkout Fields for WooCommerce \u2013 Customize & Organize Checkout Fields. plugin for WordPre...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-8778\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T06:07:07.532710Z"}, {"uuid": "91c0ef93-ae05-4b4c-bc13-b8471e29bd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87785", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvixafirkk2p", "content": "CVE-2026-87785 - apache syncope\nCertain versions of Apache Syncope (3.0.0\u2011M0 through 3.0.16 and 4.0.0\u2011M0 through 4.1.2) can expose the settings used to verify internal login tokens. If an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-14T20:30:09.048186Z"}]}