{"resultsPerPage":11,"startIndex":0,"totalResults":11,"format":"NVD_CVEHistory","version":"2.0","timestamp":"2026-11-08T00:05:18.857","cveChanges":[{"change":{"cveId":"CVE-2026-63030","eventName":"New CVE Received","cveChangeId":"63139DBD-1022-454B-9576-BFAA9D6B7853","sourceIdentifier":"contact@wpscan.com","created":"2026-07-17T20:17:28.490","details":[{"action":"Added","type":"Description","newValue":"WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution."},{"action":"Added","type":"Affected","newValue":"New affected value received.  <a href=\"https:\/\/github.com\/CVEProject\/cvelistV5\/blob\/main\/cves\/2026\/63xxx\/CVE-2026-63030.json\">CVE-2026-63030<\/a>"},{"action":"Added","type":"Reference","newValue":"https:\/\/github.com\/WordPress\/wordpress-develop\/security\/advisories\/GHSA-ff9f-jf42-662q"},{"action":"Added","type":"Reference","newValue":"https:\/\/wordpress.org\/news\/2026\/07\/wordpress-7-0-2-release\/"}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"CVE Modified","cveChangeId":"EB2970F4-6014-4444-9D3D-5AA83F288EE0","sourceIdentifier":"134c704f-9b21-4f2e-91b3-4a467353bcc0","created":"2026-07-17T20:17:28.490","details":[{"action":"Added","type":"CVSS V3.1","newValue":"AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N"},{"action":"Added","type":"CWE","newValue":"CWE-436"},{"action":"Added","type":"SSVC","newValue":{"timestamp":"2026-07-17T19:49:03.411526Z","id":"CVE-2026-63030","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"CVE Modified","cveChangeId":"9AE88561-51AB-4D15-A4C6-67650AD6CE7C","sourceIdentifier":"contact@wpscan.com","created":"2026-07-18T05:16:56.167","details":[{"action":"Added","type":"CVSS V3.1","newValue":"AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H"}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"CVE CISA KEV Update","cveChangeId":"0BFC7EFB-A462-427C-96F3-8524DF509C06","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","created":"2026-07-21T16:00:00.343","details":[{"action":"Added","type":"Date Added","newValue":"2026-07-21"},{"action":"Added","type":"Due Date","newValue":"2026-07-21"},{"action":"Added","type":"Required Action","newValue":"2026-07-21"},{"action":"Added","type":"Vulnerability Name","newValue":"2026-07-21"}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"CVE Modified","cveChangeId":"39D3AF55-5B1F-436F-904E-5FA2EE239789","sourceIdentifier":"134c704f-9b21-4f2e-91b3-4a467353bcc0","created":"2026-07-21T16:17:19.810","details":[{"action":"Added","type":"Reference","newValue":"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63030"},{"action":"Changed","type":"SSVC","oldValue":{"timestamp":"2026-07-17T19:49:03.411526Z","id":"CVE-2026-63030","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"},"newValue":{"timestamp":"2026-07-21T15:45:15.918337Z","id":"CVE-2026-63030","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"Initial Analysis","cveChangeId":"A2BC35B0-1AA2-436F-BBEC-1ABF8B8B5EBB","sourceIdentifier":"nvd@nist.gov","created":"2026-07-21T19:23:34.153","details":[{"action":"Added","type":"CPE Configuration","newValue":"OR\n          *cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* versions from (including) 6.9 up to (excluding) 6.9.5\n          *cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* versions from (including) 7.0 up to (excluding) 7.0.2"},{"action":"Added","type":"Reference Type","newValue":"WPScan: https:\/\/github.com\/WordPress\/wordpress-develop\/security\/advisories\/GHSA-ff9f-jf42-662q Types: Vendor Advisory"},{"action":"Added","type":"Reference Type","newValue":"WPScan: https:\/\/wordpress.org\/news\/2026\/07\/wordpress-7-0-2-release\/ Types: Release Notes"},{"action":"Added","type":"Reference Type","newValue":"CISA-ADP: https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63030 Types: US Government Resource"}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"CVE Modified","cveChangeId":"F585C7E6-9818-4CC4-BC04-BF6E9E39848C","sourceIdentifier":"134c704f-9b21-4f2e-91b3-4a467353bcc0","created":"2026-07-22T05:17:11.910","details":[{"action":"Changed","type":"SSVC","oldValue":{"timestamp":"2026-07-21T15:45:15.918337Z","id":"CVE-2026-63030","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"},"newValue":{"timestamp":"2026-07-21T00:00:00+00:00","id":"CVE-2026-63030","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"CVE Translated","cveChangeId":"0617B6C9-3BB5-4010-AA1E-AAF0038EBE44","sourceIdentifier":"nvd@nist.gov","created":"2026-07-22T23:10:00.110","details":[{"action":"Added","type":"Translation","newValue":"Title: WordPress 6.9.0-6.9.4, 7.0.0 y 7.0.1, Description: Las instancias de WordPress 6.9.x anteriores a 6.9.5 y 7.0.x anteriores 7.0.2 están afectadas por un problema de confusión en el enrutamiento del endpoint batch de la API REST que, combinado con una vulnerabilidad de inyeccción SQL en author__not_in en WP_Query (CVE-2026-60137), permite que un atacante realice una inyección SQL y logre ejecución remota de código (RCE)."}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"CVE Modified","cveChangeId":"E75B8728-3FB5-4EB8-939A-B54679F1D22E","sourceIdentifier":"contact@wpscan.com","created":"2026-10-07T19:17:39.767","details":[{"action":"Added","type":"Reference","newValue":"https:\/\/github.com\/WordPress\/wordpress-develop\/security\/advisories\/GHSA-ff9f-jf42-662q"},{"action":"Added","type":"Reference","newValue":"https:\/\/wordpress.org\/news\/2026\/07\/wordpress-7-0-2-release\/"},{"action":"Removed","type":"Reference","oldValue":"https:\/\/github.com\/WordPress\/wordpress-develop\/security\/advisories\/GHSA-ff9f-jf42-662q"},{"action":"Removed","type":"Reference","oldValue":"https:\/\/wordpress.org\/news\/2026\/07\/wordpress-7-0-2-release\/"},{"action":"Removed","type":"Reference Type","oldValue":"https:\/\/github.com\/WordPress\/wordpress-develop\/security\/advisories\/GHSA-ff9f-jf42-662q Types: Vendor Advisory"},{"action":"Removed","type":"Reference Type","oldValue":"https:\/\/wordpress.org\/news\/2026\/07\/wordpress-7-0-2-release\/ Types: Release Notes"}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"CVE Modified","cveChangeId":"18FF76E9-CA25-4347-901D-40D87A38F65E","sourceIdentifier":"134c704f-9b21-4f2e-91b3-4a467353bcc0","created":"2026-10-07T19:17:39.767","details":[{"action":"Removed","type":"CVSS V3.1","oldValue":"AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:N\/A:N"},{"action":"Added","type":"Reference","newValue":"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63030"},{"action":"Removed","type":"Reference","oldValue":"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63030"},{"action":"Removed","type":"Reference Type","oldValue":"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-63030 Types: US Government Resource"},{"action":"Removed","type":"SSVC","oldValue":{"timestamp":"2026-07-21T00:00:00+00:00","id":"CVE-2026-63030","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}},{"action":"Added","type":"SSVC","newValue":{"timestamp":"2026-07-22T03:55:47.123838Z","id":"CVE-2026-63030","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]}},{"change":{"cveId":"CVE-2026-63030","eventName":"Modified Analysis","cveChangeId":"22A22209-8C2B-43A8-898B-641C01B6F070","sourceIdentifier":"nvd@nist.gov","created":"2026-10-08T10:35:50.787","details":[]}}]}