{"vulnerability": "cve-2026-1614", "sightings": [{"uuid": "ffa86637-9075-4a4d-b7fa-5a10e4e89257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16144", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzcwkxawn2n", "content": "\ud83d\udfe0 CVE-2026-16144 - High (8.1)\n\nThe Kali Forms \u2014 Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Rem...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16144/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T11:01:12.187558Z"}, {"uuid": "393842f3-9eda-4b69-a021-435fca113fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16144", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22fgopyh2v", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-16144 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kali Forms: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a WordPress-\u0441\u0430\u0439\u0442\u0430\u043c\n\n\n\nhttps://kripta.biz/posts/F3FB0DE8-9233-4CC8-94FC-2190D0844294", "creation_timestamp": "2026-08-01T18:01:06.775627Z"}, {"uuid": "ba7929a1-2de5-4130-954e-8fe3f3905325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16144", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms2lby6dex2m", "content": "CVE-2026-16144 - Critical RCE in Kali Forms WordPress plugin. Unauthenticated code execution via call_user_func. CVSS 8.1. No patch available - disable plugin now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-16144/", "creation_timestamp": "2026-08-01T23:03:24.257616Z"}, {"uuid": "b596a202-ddd3-4b43-a25e-d02170d13518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16144", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117022746482222924", "content": "CVE-2026-16144 - Critical RCE in Kali Forms WordPress plugin. Unauthenticated code execution via call_user_func. CVSS 8.1. No patch available - disable plugin now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-16144/", "creation_timestamp": "2026-08-01T23:03:24.979524Z"}, {"uuid": "e1712c4a-d14f-49e9-802c-49246227b30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16143", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mseh43v6iu23", "content": "CVE-2026-16143 vikrentitems (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-05T21:15:09.427911Z"}, {"uuid": "3451af9b-1de2-43fa-b8d1-f20dde6138ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16142", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117098704007638210", "content": "CVE-2026-16142 (CRITICAL, CVSS 9.8): TrueBooker WP plugin \u22641.2.6 is vulnerable to auth bypass via user-controlled AJAX handler. Attackers can hijack any account by changing email & triggering password reset. Restrict or disable TrueBooker. https://radar.offseq.com/threat/cve-2026-16142-cwe-639-authorization-bypass-through-user-controlled-key-in-themetechmount-truebooker-17123cd1c5904122 #OffSeq #WordPress #CVE2026_16142", "creation_timestamp": "2026-08-15T09:00:25.933979Z"}, {"uuid": "ae7b1d2b-09ab-4528-82d4-ce1c5093706a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16142", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt4cpjezg72c", "content": "TrueBooker WP plugin \u22641.2.6 has a CRITICAL auth bypass (CVE-2026-16142). Attackers can hijack any user via email change & password reset. Disable or restrict plugin access until a fix. https://radar.offseq.com/threat/cve-2026-16142-cwe-639-authorization-bypass-through-user-controlled-key-in-theme...", "creation_timestamp": "2026-08-15T09:00:26.598958Z"}, {"uuid": "48a376a8-61f5-403c-b280-a0d5cc777dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4g2lvjhh24", "content": "\ud83d\udd34 CVE-2026-16142 - Critical (9.8)\n\nThe TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16142/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T10:00:19.865395Z"}, {"uuid": "945e1bca-a3d3-4d87-b2fe-e99c8bf7dab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4itlksev23", "content": "CVE-2026-16142\nThe TrueBooker plugin for WordPress allows unauthorized users to change any account's email address. This could lead to account takeover if an attacker gains control of the email address associated with an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T10:50:05.296789Z"}, {"uuid": "57e7277c-8ac2-4779-80e2-b63e102e8b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16145", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt5f4hy6y22t", "content": "CVE-2026-16145 gdpr-compliant-recaptcha-for-all-forms (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T19:16:08.978838Z"}, {"uuid": "7a8af887-bfb5-485a-8e0a-7552299da2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16146", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt5p6b24qu2j", "content": "CVE-2026-16146 gdpr-compliant-recaptcha-for-all-forms (CVSS Score 4.9) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T22:16:06.001971Z"}, {"uuid": "dc0ec5de-1737-4d88-8a9d-3a82e220c5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt5vuthieq2c", "content": "CVE-2026-16142 truebooker-appointment-booking (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T00:16:05.855437Z"}, {"uuid": "bbe7af3a-9a65-4ab3-ad7a-8e8646de3a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16149", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117151583748839099", "content": "CVE-2026-16149 - Missing Authorization in WordPress Security Hardener plugin (<=2.4.4). Bypasses REST API protections. CVSS 8.8. Monitor for patch now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-16149/", "creation_timestamp": "2026-08-24T17:08:27.653947Z"}, {"uuid": "071de35d-f665-4fa8-94f9-af4dba38314b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16149", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtts6ezxcv2i", "content": "CVE-2026-16149 - Missing Authorization in WordPress Security Hardener plugin (<=2.4.4). Bypasses REST API protections. CVSS 8.8. Monitor for patch now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-16149/", "creation_timestamp": "2026-08-24T17:08:25.344196Z"}, {"uuid": "6c23459b-48ff-4a20-96b9-0fcd1f687aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i2gzzmx55e4jk", "content": "CVE-2026-16149 - Security Hardener\nCVE ID : CVE-2026-16149\n \n Published : Aug. 22, 2026, 11:27 p.m. | 32\u00a0minutes ago\n \n Description : The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4. The vulnerabilit...", "creation_timestamp": "2026-08-23T00:24:22.721688Z"}, {"uuid": "41b739fb-4545-4ee4-8475-d5633abd0392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16149", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpln6adlw2m", "content": "\ud83d\udfe0 CVE-2026-16149 - High (8.8)\n\nThe Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16149/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T01:00:46.823803Z"}, {"uuid": "9c1dbeb9-e6b0-4a22-a306-0bbc703da78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16149", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117144710268059473", "content": "CVE-2026-16149 (HIGH, CVSS 8.8): marc4 Security Hardener <=2.4.4 allows Subscriber-level users to create Admin accounts or reset passwords via REST API. Disable plugin or limit API access pending patch. https://radar.offseq.com/threat/cve-2026-16149-cwe-269-improper-privilege-management-in-marc4-security-hardener-a438d1f2a5360b5c #OffSeq #WordPress #Vulnerability #Infosec", "creation_timestamp": "2026-08-23T12:00:25.021399Z"}, {"uuid": "f4319ea9-3cd6-46f4-a4a1-14b1d85afffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16149", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtqqiqligs2t", "content": "HIGH severity: marc4 Security Hardener <=2.4.4 lets Subscribers escalate to Admin via REST API. Disable plugin or restrict REST API for low-priv users until patched. https://radar.offseq.com/threat/cve-2026-16149-cwe-269-improper-privilege-management-in-marc4-security-hardener-a438d1f2a5360b5c #O...", "creation_timestamp": "2026-08-23T12:00:26.660263Z"}, {"uuid": "e4c477d9-3823-44c7-a952-5b62402a8959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16140", "type": "seen", "source": "Telegram/ihh6lu2JwVHbxCCtzMwz7J2so3OYSU8lmtMIGGUfSqoltoc", "content": "", "creation_timestamp": "2026-09-18T04:00:14.108524Z"}, {"uuid": "1d45eb30-3e37-4ca3-82dc-8588d0393c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16140", "type": "published-proof-of-concept", "source": "Telegram/ihh6lu2JwVHbxCCtzMwz7J2so3OYSU8lmtMIGGUfSqoltoc", "content": "", "creation_timestamp": "2026-09-19T00:00:13.150191Z"}]}