{
  "feed_version": "1.0",
  "title": "ARETIQ Daily Vulnerability Bulletin",
  "description": "Curated daily digest of high-priority vulnerabilities.",
  "home_page_url": "https://aretiq.ai/bulletins/",
  "feed_url": "https://aretiq.ai/feed/bulletins.json",
  "date": "2026-11-07",
  "generated_at": "2026-11-07T12:45:46.049591+00:00",
  "total_cves": 2,
  "groups": 2,
  "items": [
    {
      "vendor": "blubrry_podcasting",
      "product": "powerpress_podcasting",
      "cve_count": 1,
      "cve_ids": [
        "CVE-2026-121762"
      ],
      "cpes": [
        {
          "cpe": "cpe:2.3:a:blubrry_podcasting:powerpress_podcasting:*:*:*:*:*:*:*:*",
          "versions": null
        }
      ],
      "max_cvss": 8.8,
      "cvss_version": "3.1",
      "aas_score": 9.1,
      "severity": "HIGH",
      "summary": "Blubrry PowerPress Podcasting plugin for WordPress versions through 11.18.0 is affected by one HIGH-severity vulnerability (CVE-2026-121762, CVSS 8.8) involving cross-site request forgery. An attacker could trick an authenticated administrator into executing unintended actions by visiting a malicious page, potentially compromising plugin settings or site integrity. WordPress site administrators using PowerPress should update to a patched version immediately and review the vendor advisory at Patchstack for further details.",
      "references": [
        "https://patchstack.com/database/wordpress/plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-plugin-11-18-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve"
      ]
    },
    {
      "vendor": "suplugins",
      "product": "superb_addons:_blocks,_patterns_&_theme_designer",
      "cve_count": 1,
      "cve_ids": [
        "CVE-2026-66669"
      ],
      "cpes": [
        {
          "cpe": "cpe:2.3:a:suplugins:superb_addons_blocks_patterns_amp_theme_designer:*:*:*:*:*:*:*:*",
          "versions": "< 4.2.5"
        }
      ],
      "max_cvss": 8.8,
      "cvss_version": "3.1",
      "aas_score": 9.1,
      "severity": "HIGH",
      "summary": "Superb Addons: Blocks, Patterns & Theme Designer plugin for WordPress versions through 4.2.4 is affected by one HIGH-severity cross-site request forgery vulnerability (CVE-2026-66669, CVSS 8.8). An attacker could exploit this flaw to perform unauthorized actions on behalf of an authenticated administrator by luring them to a crafted page. WordPress administrators using this plugin should update to a patched release as soon as possible and consult the Patchstack vendor advisory for remediation guidance.",
      "references": [
        "https://patchstack.com/database/wordpress/plugin/superb-blocks/vulnerability/wordpress-superb-addons-blocks-patterns-amp-theme-designer-plugin-4-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve"
      ]
    }
  ],
  "upgrades": [
    {
      "cve_id": "CVE-2026-119977",
      "vendor": "wordpress",
      "product": "wordpress",
      "old_level": "exploitable",
      "new_level": "itw",
      "old_aas": 10.2,
      "new_aas": 13.2,
      "original_bulletin": "2026-10-31"
    }
  ]
}