{"vulnerability": "CVE-2026-9677", "sightings": [{"uuid": "693469fc-345e-481f-8d80-c2133309a249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9677", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpawti42vq2g", "content": "Shariff for WordPress <=1.0.11 has a HIGH severity stored XSS flaw \u2014 high privilege users can inject malicious scripts via shariff_infourl. Restrict admin access & monitor configs. https://radar.offseq.com/threat/cve-2026-9677-cwe-79-cross-site-scripting-xss-in-s-101a28f25d1f6f06 #OffSeq #WordPre...", "creation_timestamp": "2026-06-27T07:30:27.058449Z"}, {"uuid": "e54b13b8-a949-43ba-9553-e1c2763e540e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9677", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpb7rx3jze23", "content": "CVE-2026-9677 - Shariff for WordPress\nCVE ID : CVE-2026-9677\n \n Published : June 27, 2026, 6 a.m. | 3\u00a0hours, 45\u00a0minutes ago\n \n Description : The Shariff for WordPress Shariff for WordPress plugin through 1.0.11 does not sanitize or escape the shariff_infourl setting before out...", "creation_timestamp": "2026-06-27T10:10:38.540945Z"}]}