{"vulnerability": "cve-2026-1582", "sightings": [{"uuid": "8535036c-403c-4458-b3cb-7d9e82e7d9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15826", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mt3s65m3s72u", "content": "CVE-2026-15826 (CVSS 9.8) is a User Profile Builder vulnerability letting attackers log in as WordPress admin. Over 40,000 sites affected; update to 3.16.5\n\n#CVE202615826 #WordPress #UserProfileBuilder #InfoSec", "creation_timestamp": "2026-08-15T04:04:23.746633Z"}, {"uuid": "a266cf21-13ed-4d1f-8df5-ae05eac041c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15826", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117098350030600158", "content": "CVE-2026-15826: CRITICAL flaw in User Profile Builder (\u22643.16.4) allows auth bypass via type conversion error. Attackers gain admin (user ID 1) access. Restrict registration or disable plugin. Details: https://radar.offseq.com/threat/cve-2026-15826-cwe-704-incorrect-type-conversion-or-cast-in-cozmoslabs-user-profile-builder-beautiful-03ed293eb36de594 #OffSeq #WordPress #Infosec #CVE", "creation_timestamp": "2026-08-15T07:30:23.350152Z"}, {"uuid": "177ea5bd-25d3-4712-9393-4cff8b059b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15826", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt45okhdan2t", "content": "CRITICAL: User Profile Builder \u22643.16.4 has an auth bypass (CVE-2026-15826). Attackers can gain admin access. Disable plugin or restrict registration until a patch arrives. https://radar.offseq.com/threat/cve-2026-15826-cwe-704-incorrect-type-conversion-or-cast-in-cozmoslabs-user-profile-builder-b...", "creation_timestamp": "2026-08-15T07:30:25.620292Z"}, {"uuid": "d82ca6b4-dfc6-4592-a615-5f40a0ea41b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr6gkzbrpy2b", "content": "CVE-2026-15829 - SQL Injection and Security Boundary Bypass in googleapis/mcp-toolbox\nCVE ID : CVE-2026-15829\n \n Published : July 21, 2026, 5:17 p.m. | 28\u00a0minutes ago\n \n Description : A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the p...", "creation_timestamp": "2026-07-21T18:24:26.112686Z"}]}