{"vulnerability": "cve-2026-9273", "sightings": [{"uuid": "a8c8da28-4dd9-42de-8ddb-d11abd8a58df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9273", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117041373701599609", "content": "Kadence Memberships (stellarwp) \u22644.0.0 suffers CRITICAL vuln (CVE-2026-9273, CVSS 9.3): attackers can hijack any account by poisoning password reset links. Restrict reset features & monitor for patches. https://radar.offseq.com/threat/cve-2026-9273-cwe-640-weak-password-recovery-mechanism-for-forgotten-password-in-stellarwp-membership-10c6cffc948a3c97 #OffSeq #WordPress #Vuln #Security", "creation_timestamp": "2026-08-05T06:00:33.963203Z"}, {"uuid": "31a8d0a6-948b-4a0d-8c0f-fd68db899669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9273", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msctyppdsc2t", "content": "Kadence Memberships plugin \u22644.0.0 hit by CRITICAL CVE-2026-9273: attackers can hijack accounts via poisoned password reset links. Restrict reset functionality & watch for patches. https://radar.offseq.com/threat/cve-2026-9273-cwe-640-weak-password-recovery-mechanism-for-forgotten-password-in-stel...", "creation_timestamp": "2026-08-05T06:00:35.632663Z"}, {"uuid": "4bde4c0d-6c8d-4ad8-b71c-7bf42196072f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mscxkagysn2p", "content": "CVE-2026-9273 - membership plugin \u2013 kadence memberships\nA security issue in the Kadence Memberships plugin for WordPress allows attackers to take control of any account, including administrator accounts, by sending\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#stellarwp #CVE #infosec", "creation_timestamp": "2026-08-05T07:04:04.226794Z"}, {"uuid": "287b04b4-77d9-4f35-97e3-2f8c02e38e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9273", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mskc577yy22o", "content": "Daily IT Security Digest \u2014 August 8, 2026\nkeys recovered by attackers. Upgrade to version 4.0.0 or later immediately to mitigate this critical risk.\n   Source: \n\n5. **Kadence Memberships Arbitrary Account Hijacking (CVE-2026-9273,", "creation_timestamp": "2026-08-08T05:08:48.705493Z"}, {"uuid": "9f965353-aa55-4650-b20b-e9e0a3e443e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9273", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mser5y3n3s2t", "content": "CVE-2026-9273 restrict-content (CVSS Score 9.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T00:15:10.202269Z"}]}