{"vulnerability": "cve-2026-4241", "sightings": [{"uuid": "5b31b158-b36d-4281-8842-c08a892c117e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkmvtgppe32t", "content": "CVE-2026-42412 - WordPress WP User Frontend plugin\nCVE ID : CVE-2026-42412\n \n Published : April 29, 2026, 9:16 a.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Se...", "creation_timestamp": "2026-04-29T10:38:29.750612Z"}, {"uuid": "c6315004-aef7-4d33-9515-45380bc7856a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42410", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm76sgru3z2u", "content": "CVE-2026-42410 thegem-elements-elementor (CVSS Score 6.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-19T10:32:06.737935Z"}, {"uuid": "815eebed-25c8-4439-b4ea-8a66f8ecc677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42412", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mm7c5tys652h", "content": "CVE-2026-42412 wp-user-frontend (CVSS Score 5.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-19T11:32:11.311534Z"}, {"uuid": "9a3d9795-3e40-4be7-b3e1-b115fd3a865a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393144240761553", "content": "CVE-2026-42417 (CRITICAL): ARMember Premium <= 7.8 is vulnerable to unauthenticated SQL Injection (CWE-89). No mitigation yet \u2014 review deployments & monitor databases closely. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21ef978d1d38 #OffSeq #Vulnerability #SQLInjection #WordPress", "creation_timestamp": "2026-10-06T09:00:26.167471Z"}, {"uuid": "3491f6ca-a2ed-4d44-93a1-794feff6e0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42417", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx72xgtcgb2j", "content": "CRITICAL SQL Injection in ARMember Premium <= 7.8 (CVE-2026-42417) allows unauthenticated exploitation. No fix yet \u2014 audit your sites and restrict access. https://radar.offseq.com/threat/cve-2026-42417-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-559a21e...", "creation_timestamp": "2026-10-06T09:00:28.304797Z"}, {"uuid": "ffa7e3c9-4aae-4802-b6ed-ce4bc335b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42417", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tvfzxs2l", "content": "\ud83d\udea8 CVE-2026-42417 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in ARMember Premium <= 7.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42417\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:10:03.575295Z"}, {"uuid": "0846c4fc-0376-4acf-b4e5-636def78d48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tnht5m2o", "content": "\ud83d\udea8 CVE-2026-42415 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:55.465641Z"}, {"uuid": "5f05d20c-c0c5-4742-954a-b8b2907ac64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393498184652638", "content": "CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality \u22643.9.3. Unauthenticated attackers can steal sensitive data. No official patch yet \u2014 restrict access ASAP. https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b18a06bf1443 #OffSeq #CVE202642415 #Infosec #WordPress #SQLInjection", "creation_timestamp": "2026-10-06T10:30:26.803951Z"}, {"uuid": "dd55d37b-d8ed-4428-a03c-e6d17f4c47c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx77yfdbua2a", "content": "CRITICAL: Porto Theme - Functionality \u22643.9.3 vulnerable to unauthenticated SQL injection (CVE-2026-42415). Patch status unconfirmed \u2014 restrict access now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b...", "creation_timestamp": "2026-10-06T10:30:28.668949Z"}]}