[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-86717":6},{"stargazers_count":4,"fetched_at":5},8,"2026-10-11T20:31:33.456Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":229,"aliases":239,"duplicate_of":9,"upstream":240,"downstream":241,"duplicates":242,"related":243,"reserved_at":9,"published_at":244,"modified_at":245,"state":246,"summary":247,"references_raw":255,"kevs":263,"epss":264,"epss_history":267,"metrics":269,"affected":277},"CVE-2026-86717","The Insurify  WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","weakness","Incomplete","Class","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[24,61,101],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1211","Exploitation for Stealth",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0005","Stealth",[35,40,45,49,53,57],{"id":36,"name":37,"tactic":38},"D3-PSEP","Process Segment Execution Prevention",{"name":39},"Harden",{"id":41,"name":42,"tactic":43},"D3-MBT","Memory Boundary Tracking",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-PCSV","Process Code Segment Verification",{"name":44},{"id":50,"name":51,"tactic":52},"D3-SFCV","Stack Frame Canary Validation",{"name":39},{"id":54,"name":55,"tactic":56},"D3-SSC","Shadow Stack Comparisons",{"name":44},{"id":58,"name":59,"tactic":60},"D3-SAOR","Segment Address Offset Randomization",{"name":39},{"id":62,"name":63,"tactics":64,"countermeasures":70},"T1542.002","Component Firmware",[65,66,67],{"id":29,"name":30},{"id":32,"name":33},{"id":68,"name":69},"TA0110","Persistence",[71,75,79,83,87,92,97],{"id":72,"name":73,"tactic":74},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":44},{"id":76,"name":77,"tactic":78},"D3-FV","Firmware Verification",{"name":44},{"id":80,"name":81,"tactic":82},"D3-FBA","Firmware Behavior Analysis",{"name":44},{"id":84,"name":85,"tactic":86},"D3-SU","Software Update",{"name":39},{"id":88,"name":89,"tactic":90},"D3-SWI","Software Inventory",{"name":91},"Model",{"id":93,"name":94,"tactic":95},"D3-RS","Restore Software",{"name":96},"Restore",{"id":98,"name":99,"tactic":100},"D3-AVE","Asset Vulnerability Enumeration",{"name":91},{"id":102,"name":103,"tactics":104,"countermeasures":113},"T1556","Modify Authentication Process",[105,106,109,110],{"id":29,"name":30},{"id":107,"name":108},"TA0112","Defense Impairment",{"id":68,"name":69},{"id":111,"name":112},"TA0031","Credential Access",[114,119,123,128,132,136,140,144,148,152,156,160,164,168,173,177,181,185,189,193,197,201,205,209,213,217,221,225],{"id":115,"name":116,"tactic":117},"D3-LFP","Local File Permissions",{"name":118},"Isolate",{"id":120,"name":121,"tactic":122},"D3-HBPI","Hardware-based Process Isolation",{"name":118},{"id":124,"name":125,"tactic":126},"D3-FEV","File Eviction",{"name":127},"Evict",{"id":129,"name":130,"tactic":131},"D3-HS","Host Shutdown",{"name":127},{"id":133,"name":134,"tactic":135},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":137,"name":138,"tactic":139},"D3-CQ","Content Quarantine",{"name":118},{"id":141,"name":142,"tactic":143},"D3-ABPI","Application-based Process Isolation",{"name":118},{"id":145,"name":146,"tactic":147},"D3-SFA","System File Analysis",{"name":44},{"id":149,"name":150,"tactic":151},"D3-PT","Process Termination",{"name":127},{"id":153,"name":154,"tactic":155},"D3-SCF","System Call Filtering",{"name":118},{"id":157,"name":158,"tactic":159},"D3-AM","Access Modeling",{"name":91},{"id":161,"name":162,"tactic":163},"D3-RC","Restore Configuration",{"name":96},{"id":165,"name":166,"tactic":167},"D3-FE","File Encryption",{"name":39},{"id":169,"name":170,"tactic":171},"D3-DF","Decoy File",{"name":172},"Deceive",{"id":174,"name":175,"tactic":176},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":178,"name":179,"tactic":180},"D3-CF","Content Filtering",{"name":118},{"id":182,"name":183,"tactic":184},"D3-FA","File Analysis",{"name":44},{"id":186,"name":187,"tactic":188},"D3-WSAM","Web Session Access Mediation",{"name":118},{"id":190,"name":191,"tactic":192},"D3-CI","Configuration Inventory",{"name":91},{"id":194,"name":195,"tactic":196},"D3-RF","Restore File",{"name":96},{"id":198,"name":199,"tactic":200},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":202,"name":203,"tactic":204},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":206,"name":207,"tactic":208},"D3-RFAM","Remote File Access Mediation",{"name":118},{"id":210,"name":211,"tactic":212},"D3-CM","Content Modification",{"name":118},{"id":214,"name":215,"tactic":216},"D3-NTPM","Network Traffic Policy Mapping",{"name":91},{"id":218,"name":219,"tactic":220},"D3-KBPI","Kernel-based Process Isolation",{"name":118},{"id":222,"name":223,"tactic":224},"D3-PS","Process Suspension",{"name":127},{"id":226,"name":227,"tactic":228},"D3-HR","Host Reboot",{"name":127},[230],{"_key":231,"name":232,"source":233,"url":234,"maturity":235,"reliability_score":236,"verified":237,"type":9,"platforms":238,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_70D6A435D609191E","Exploit Reference (wpscan.com)","reference","https://wpscan.com/vulnerability/598c7ff4-d6cb-4b4b-a8cd-83f019d10350/","unknown",0.2,false,[],[],[],[],[],[],"2026-10-11T06:00:14.686Z","2026-10-11T11:32:43.879Z","Received",{"cisa_kev":237,"cisa_ransomware":237,"cisa_vendor":9,"epss_severity":248,"epss_score":249,"severity":250,"severity_score":251,"severity_version":252,"severity_source":253,"severity_vector":254,"severity_status":246},"low",0.00146,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",[256],{"url":234,"sources":257,"tags":259},[253,258],"nvd",[260,261,262],"Exploit","VDB Entry","Technical Description",[],{"date":265,"score":249,"percentile":266},"2026-10-11",0.03384,[268],{"date":265,"score":249,"percentile":266},[270,275],{"source":253,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":271,"cvss_v4_0":9},{"baseScore":251,"baseSeverity":272,"vectorString":254,"impactScore":273,"exploitabilityScore":274},"CRITICAL",8.7,10,{"source":258,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":276,"cvss_v4_0":9},{"baseScore":251,"baseSeverity":272,"vectorString":254,"impactScore":273,"exploitabilityScore":274},[278],{"ecosystem":9,"name":279,"vendor":235,"product":280,"cpe_part":281,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":282},"Insurify","insurify","a",[283],{"version":284,"is_range":285,"range_type":253,"version_start":9,"version_start_type":9,"version_end":286,"version_end_type":287,"fixed_in":9},"\u003C= 1.0",true,"1.0","including"]