{"vulnerability": "cve-2026-16030", "sightings": [{"uuid": "d320ffe5-9f97-4457-9f66-ddf1cbe89342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16030", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mslgvx3m7r2u", "content": "\ud83d\udfe0 CVE-2026-16030 - High (8.1)\n\nThe MStore API  WordPress plugin before 4.21.0 does not correctly verify the cryptographic signat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16030/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T16:00:22.083912Z"}, {"uuid": "ee347736-beb7-4d7e-bffd-3ecdb4c35442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16030", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117053405708747434", "content": "MStore API WordPress plugin (<4.21.0) hit by CRITICAL vuln (CVE-2026-16030): improper phone token checks enable account takeover, incl. admins. Restrict endpoints & monitor logins until patched. https://radar.offseq.com/threat/cve-2026-16030-cwe-287-improper-authentication-in-mstore-api-799def1fc3890a44 #OffSeq #WordPress #CVE2026_16030 #Vuln", "creation_timestamp": "2026-08-07T09:00:27.504055Z"}]}