{"vulnerability": "cve-2026-1893", "sightings": [{"uuid": "32d30d4f-5339-4cd5-baa0-6ff3ceb65d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18933", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msdqom5zgp2c", "content": "wp-downloadmanager 1.68.11\u306f\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3067\u4efb\u610f\u306ePHP\u30d5\u30a1\u30a4\u30eb\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u53ef\u80fd\u3002\u3053\u308c\u306b\u3088\u308a\u3001Web\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-18933 CVSS 7.2 | HIGH", "creation_timestamp": "2026-08-05T14:33:54.343596Z"}, {"uuid": "9ffac253-e6cc-4e6a-aa77-17f1075b379e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18937", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthaimwkjn2c", "content": "CVE-2026-18937 - broken link checker\nAn outdated version of the Broken Link Checker plugin for WordPress allows attackers to inject malicious code into the website, potentially leading to data breaches or website\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-19T17:20:04.733853Z"}, {"uuid": "53e45e88-4dc3-4b08-b096-e1118abedbcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18933", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117043971069363515", "content": "CVE-2026-18933 - Arbitrary file upload in WordPress wp-downloadmanager plugin. Admin-privileged RCE risk via unsanitized uploads. CVSS 7.2. Unpatched - disable plugin or restrict access now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-18933/", "creation_timestamp": "2026-08-05T17:01:06.792222Z"}, {"uuid": "5b9f9f8a-238f-4851-8c34-14c0a1306925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h6d6a7jlcajrs", "content": "CVE-2026-18932\nCVE ID : CVE-2026-18932\n \n Published : Aug. 14, 2026, 10:20 p.m. | 15\u00a0minutes ago\n \n Description : None\n \n Severity: 0.0 | NA\n \n Visit the link for more details, such as CVSS details, affected products, timeline, and more...\n#CVE", "creation_timestamp": "2026-08-14T23:39:53.947384Z"}, {"uuid": "f2ea6145-4ccb-4874-8094-1a9d175fc8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18933", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3msfxfzejlv2g", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-18933\n\nThe wp-downloadmanager WordPress plugin, in version 1.68.11 (also affecting the 6.9.4 release line), allows an admin-privileged user (current_user_...", "creation_timestamp": "2026-08-06T11:39:41.865076Z"}, {"uuid": "f6239cbf-a51d-45d7-9f65-7778378a604a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18931", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhuuzdtt625", "content": "CVE-2026-18931\nThe Talassoft Industrial Management program (versions 4 through 15) contains hard\u2011coded login information that can be discovered and used to pull out data stored inside the system. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-01T16:50:06.654153Z"}, {"uuid": "c7237c92-778c-47d1-9b08-07c24889166e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18931", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muhzantma525", "content": "\ud83d\udea8 CVE-2026-18931 \u2014 CVSS 9.1 CRITICAL\n\nUse of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18931\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T18:08:12.361839Z"}, {"uuid": "e4142f76-9b3d-4524-9ddc-766d8295f9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18937", "type": "seen", "source": "Telegram/6b-rkbWXWakDcg0xMKZrOjk11Dq6lI735beDpEcqG6K42dE", "content": "", "creation_timestamp": "2026-09-22T07:00:10.735596Z"}, {"uuid": "255a3341-bfdf-48a8-a906-b279ba8357fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18937", "type": "published-proof-of-concept", "source": "Telegram/6b-rkbWXWakDcg0xMKZrOjk11Dq6lI735beDpEcqG6K42dE", "content": "", "creation_timestamp": "2026-09-23T00:00:12.362591Z"}]}