{"vulnerability": "cve-2026-65520", "sightings": [{"uuid": "0934f9db-4522-4813-bf55-4d0f5b31c6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65520", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msgfqjds452f", "content": "CVE-2026-65520 - wp oauth server\nAn unauthenticated attacker can inject malicious SQL code to access sensitive data in the WordPress site. This is a serious issue because it could allow an attacker to gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#miniorange #CVE #infosec", "creation_timestamp": "2026-08-06T15:56:06.467009Z"}, {"uuid": "f8a1e975-069c-45a2-8edd-e83e564b6e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65520", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msh67njzkv26", "content": "CVE-2026-65520 - Unpatched SQLi in WP OAuth Server <=6.2.0. CVSS 9.3. Unauthenticated attackers can exploit. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-65520/", "creation_timestamp": "2026-08-06T23:14:04.304464Z"}, {"uuid": "541b8ecd-1f3c-4e31-921d-808030d69dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65520", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117051099951209098", "content": "CVE-2026-65520 - Unpatched SQLi in WP OAuth Server <=6.2.0. CVSS 9.3. Unauthenticated attackers can exploit. Update immediately. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-65520/", "creation_timestamp": "2026-08-06T23:14:06.293477Z"}]}