{"vulnerability": "cve-2026-5714", "sightings": [{"uuid": "4cd85eeb-9852-4ff4-95d4-d7694c152869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5714", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mnufr2tffa2t", "content": "CVE-2026-5714: XSS Stored en Enable Media Replace\n\nCVE-2026-5714 en Enable Media Replace: Stored XSS que afecta 600k+ sitios hasta v4.1.8. Cualquier Autor puede inyectar scripts. \u00bfYa actualizaste a 4.1.9?\n\n#cve20265714 #enablemediareplace #storedxss #pluginsvulnerables #wordpressseguridad", "creation_timestamp": "2026-06-09T14:27:43.386577Z"}, {"uuid": "505d1742-dab8-4d77-b6e9-8542bdaf53cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5714", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnyynlbxdh2f", "content": "CVE-2026-5714 enable-media-replace (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #enable-media-replace", "creation_timestamp": "2026-06-11T10:16:26.177052Z"}, {"uuid": "ac0fa5c1-36b0-4298-8937-7b7cbb526b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57149", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpk7teoycm2k", "content": "A critical Plone RCE vulnerability (CVE-2026-57149, CVSS 9.9) allows TALES injection via the Classic portlet. Two more flaws enable DoS and SSRF.\n\n#Plone #RCE #CyberSecurity #CMS #PatchNow", "creation_timestamp": "2026-07-01T00:05:24.579071Z"}, {"uuid": "c080f3bc-0188-4546-9a4a-759356962917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57146", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-jxcw-qp4h-6jfq", "content": "", "creation_timestamp": "2026-07-20T22:35:36.798466Z"}, {"uuid": "a6a1b0ed-f9df-485a-9df9-8bf7b30dbb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57148", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f38v-77qj-h4jq", "content": "", "creation_timestamp": "2026-07-20T22:35:41.182676Z"}, {"uuid": "e57121a4-86de-423a-a271-5d6af34215b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57147", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-cwj8-7gp2-ggcw", "content": "", "creation_timestamp": "2026-07-20T22:35:44.236846Z"}, {"uuid": "8ba0e1bc-601f-45e8-a30d-bd9c2f1a489a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57145", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-29w3-p9w9-wc47", "content": "", "creation_timestamp": "2026-07-20T22:35:46.529097Z"}, {"uuid": "69e280ce-1c17-4ac2-b7ec-356f2d2ef2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57144", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-6jcq-6546-qrrw", "content": "", "creation_timestamp": "2026-07-20T22:35:48.856470Z"}, {"uuid": "9a77044f-a301-41ef-878f-5ddc04057acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57142", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-7qw2-w5rc-37x2", "content": "", "creation_timestamp": "2026-07-20T22:35:51.036964Z"}, {"uuid": "1f1f6cf9-ea1a-4714-a234-9b837b1e53ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57141", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-p69m-4f92-2v84", "content": "", "creation_timestamp": "2026-07-20T22:35:55.451475Z"}, {"uuid": "00d2ce0c-6d8b-4347-a88a-49bb62360bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57140", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9752-mhqh-h34f", "content": "", "creation_timestamp": "2026-07-20T22:35:59.845185Z"}, {"uuid": "ba14c1a0-975d-4480-b88b-51a97f8bc0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57143", "type": "published-proof-of-concept", "source": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4pcv-mg8v-vrgf", "content": "", "creation_timestamp": "2026-07-20T22:37:53.727922Z"}, {"uuid": "c106b2e6-46ad-4b81-8dc9-86fb8a152642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57145", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcvlzsfq2u", "content": "CVE-2026-57145 - praisonai\nThe PraisonAI multiedit tool allows attackers to read sensitive files and overwrite arbitrary files on the system. This is because the tool does not check file paths for safety,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #pip #CVE #infosec", "creation_timestamp": "2026-07-23T17:02:04.889917Z"}, {"uuid": "bb5e13f1-ca69-4624-b4c8-46201c8925f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57148", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz5u56b2v", "content": "CVE-2026-57148 - praisonai-platform\nThe praisonai-platform software uses a default secret key for signing and verifying session tokens, which can be easily guessed by an attacker. This means that any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #pip #CVE #infosec", "creation_timestamp": "2026-07-23T17:04:04.298154Z"}, {"uuid": "682aa5f0-2047-4f75-a48a-7d660bb4a095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57147", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdcz77dbd2q", "content": "CVE-2026-57147 - praisonai-platform\nThe PraisonAI Platform uses a default secret for generating tokens, which can be exploited by attackers. This vulnerability allows them to create fake tokens,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonaiplatform #pip #CVE #infosec", "creation_timestamp": "2026-07-23T17:04:05.746543Z"}, {"uuid": "f71be9dd-3ab8-4ebd-9eca-789fb16b1138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57145", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipckqwyd2f", "content": "\ud83d\udea8 CVE-2026-57145 \u2014 CVSS 9.1 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 4.6.62, src/praisonai/praisonai/tools/multiedit.py passes...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57145\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:08:10.213237Z"}, {"uuid": "63a8bc49-bb2e-4bc2-a8d0-7552c562545a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57140", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklolpyvl2j", "content": "\ud83d\udea8 CVE-2026-57140 \u2014 CVSS 9.4 CRITICAL\n\nPraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57140\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:08:38.266886Z"}, {"uuid": "620cfa45-5084-4c68-b72a-28dee9619356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57141", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklovt2vo24", "content": "\ud83d\udea8 CVE-2026-57141 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 1.7.2, the codeMode tool in src/praisonai-ts/src/tools/bu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57141\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:08:48.682015Z"}, {"uuid": "0d4476e7-3367-46a8-afa5-5a50b1fbf62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57147", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklp62zst22", "content": "\ud83d\udea8 CVE-2026-57147 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py assign...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57147\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:08:57.569242Z"}, {"uuid": "5cdc62d1-6448-4ec2-8f17-931541141784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57148", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklpfycrf2r", "content": "\ud83d\udea8 CVE-2026-57148 \u2014 CVSS 9.8 CRITICAL\n\nPraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonai_platform/services/auth_service.py falls ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57148\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:09:05.676925Z"}, {"uuid": "e460e96b-c7d0-4477-ac18-09774018eef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvl4jmnzjz2p", "content": "CVE-2026-57140 - praisonai\nVersions 1.6.0 through 1.7.2 of PraisonAI expose API endpoints that let anyone on the network view agent details and send commands without proving who they are. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-15T17:10:05.101375Z"}, {"uuid": "d67fba70-da0b-4940-9915-e496425953f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57141", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvl4jplvtx2y", "content": "CVE-2026-57141 - praisonai\nVersions of PraisonAI prior to 1.7.2 run user\u2011supplied JavaScript in a way that can be bypassed, giving an attacker the ability to execute operating\u2011system commands, read\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #CVE #infosec", "creation_timestamp": "2026-09-15T17:10:08.883715Z"}, {"uuid": "5cc46b9e-3173-4de3-9926-149edbd75c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57141", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmdndgzom2f", "content": "CVE-2026-57141 - praisonai\nVersions of PraisonAI before 1.7.2 let a user who can influence the codeMode tool run their own JavaScript, which can break out of the sandbox and access the server.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T04:50:05.643618Z"}, {"uuid": "64b93853-04a4-4f5c-9567-0ded043fa426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvme7cocsb2w", "content": "CVE-2026-57140 - praisonai\nVersions 1.6.0 through 1.7.1 of PraisionAI's AgentOS expose two web endpoints that anyone who can reach the server can call without proving who they are. Through these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#praisonai #mervinpraison #npm #CVE #infosec", "creation_timestamp": "2026-09-16T05:00:08.763452Z"}, {"uuid": "69c2098b-e86d-411d-a571-6183ef5444f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57149", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zxpbs3p2r", "content": "\ud83d\udea8 CVE-2026-57149 \u2014 CVSS 9.9 CRITICAL\n\nplone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a stand...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-57149\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:12:12.584628Z"}, {"uuid": "999dd171-fb52-4d67-b1d8-6026791215d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4qhmw4ldjlkmd", "content": "CVE-2026-57149 - plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection\nCVE ID : CVE-2026-57149\n \n Published : Sept. 22, 2026, 7:02 p.m. | 26\u00a0minutes ago\n \n Description : plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlet...", "creation_timestamp": "2026-09-22T20:14:52.392073Z"}, {"uuid": "3c8255a6-936a-4b6b-a14a-baac515f675f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57149", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw53jlmjg72j", "content": "CVE-2026-57149 - plone.app.portlets\nVersions of plone.app.portlets before 5.0.8, 6.0.4 and 7.0.2 let anyone who can edit a Classic portlet insert malicious content that the system will execute, giving them control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#plone #CVE #infosec", "creation_timestamp": "2026-09-22T20:40:06.230902Z"}]}