{"vulnerability": "cve-2026-7330", "sightings": [{"uuid": "4cb5e13d-497f-45e8-b621-48d389a89517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7330", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mldekif4rj2y", "content": "HIGH severity XSS in thedark Auto Affiliate Links (\u22646.8.8) allows unauthenticated script injection into WP admin stats. Update or disable plugin immediately! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-08T09:00:30.644159Z"}, {"uuid": "068741bc-30a6-4ca9-a533-1e3b34aabd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7330", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116538135511321220", "content": "\ud83d\udee1\ufe0f CVE-2026-7330: HIGH severity stored XSS in thedark Auto Affiliate Links (\u22646.8.8) lets unauthenticated attackers inject scripts via AJAX endpoint. WP admins at risk \u2014 update/disable plugin! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #Infosec #XSS", "creation_timestamp": "2026-05-08T09:00:29.100807Z"}, {"uuid": "44b018a6-db4f-47a8-b0bb-416fb45d974f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlds63aujy2h", "content": "CVE-2026-7330 - Auto Affiliate Links\nCVE ID : CVE-2026-7330\n \n Published : May 8, 2026, 9:16 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This i...", "creation_timestamp": "2026-05-08T13:04:05.999970Z"}, {"uuid": "ad6df187-0ae2-415e-a179-7d4ba8c44c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73300", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvteugu5u2g", "content": "CVE-2026-73300 - budibase\nThe Budibase MySQL integration allows multiple SQL commands to be executed in one query. This makes it possible for attackers to inject malicious SQL commands through user input fields,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#budibase #CVE #infosec", "creation_timestamp": "2026-08-12T19:10:04.024906Z"}, {"uuid": "af00c9a7-8c49-4e34-ac67-aaadbe5c3553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73300", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cg3436nj7jxpf", "content": "CVE-2026-73300 - Budibase: SQL Injection via `multipleStatements: true`\nCVE ID : CVE-2026-73300\n \n Published : Aug. 12, 2026, 6:05 p.m. | 24\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase ...", "creation_timestamp": "2026-08-12T19:11:11.921069Z"}, {"uuid": "2c59d180-9cb9-48d5-9c4e-c366a7974b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73300", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvwarlhlp27", "content": "\ud83d\udd34 CVE-2026-73300 - Critical (9.6)\n\nBudibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73300/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T20:01:28.606776Z"}, {"uuid": "1cdfbb69-fca1-496d-8b43-fd236cc70509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73307", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-hfhx-w8p8-4hc7", "content": "", "creation_timestamp": "2026-08-12T20:35:17.611530Z"}, {"uuid": "653ef40c-a29f-4401-ae46-667265e6ea43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73302", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-hp6v-6jw7-gv2f", "content": "", "creation_timestamp": "2026-08-12T20:35:31.116126Z"}, {"uuid": "63a288bb-2d40-4642-8b00-44fb9e60706c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73308", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-gh4h-34gr-87r7", "content": "", "creation_timestamp": "2026-08-12T20:35:15.359215Z"}, {"uuid": "7c0668ad-df1b-45b8-983a-7a20e78d5a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73301", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-4qcj-m5wp-jmf4", "content": "", "creation_timestamp": "2026-08-12T20:35:23.144222Z"}, {"uuid": "fa5031b8-03f6-4500-92b6-3b8030e66a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73305", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-j9fc-w3mr-x6mv", "content": "", "creation_timestamp": "2026-08-12T20:35:26.031271Z"}, {"uuid": "78e6fa03-c3f7-4517-af88-124a6666b2ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73300", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-q6x4-v3qx-85qw", "content": "", "creation_timestamp": "2026-08-12T20:35:33.380160Z"}, {"uuid": "16a94b74-14dc-41c9-bbe2-97167cc8d0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73304", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-fcrw-f7gg-6g9f", "content": "", "creation_timestamp": "2026-08-12T20:35:28.811142Z"}, {"uuid": "f4fb605a-82dd-43eb-9b97-de6cca150619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-73306", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-cr7p-cr3q-h5cm", "content": "", "creation_timestamp": "2026-08-12T20:35:36.679728Z"}, {"uuid": "283ab1c6-f14b-426c-8578-d61e942a5674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73303", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvzmsvtfy2m", "content": "\ud83d\udfe0 CVE-2026-73303 - High (8.2)\n\nBudibase is an open-source low-code platform. Prior to 3.40.0, POST /api/v2/email on account.budi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73303/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T21:01:53.910917Z"}]}