Alleged WordPress 0-Day, HMG Patient Data, Astra Files, OnlineSkills Leak, and RDWeb Access

SOCRadar’s Dark Web monitoring observed multiple underground posts claiming (1) a WordPress plugin zero-day privilege escalation exploit (10k+ installs, seller-assigned CVSS 8.8) being auctioned, (2) a 452,578-record patient database allegedly from Dr. Sulaiman Al Habib Medical Group for sale, (3) alleged Astra missile program data (1.7 GB) offered, (4) a 1.5M-record onlineskills.ru database leak, and (5) auctioned RDWeb domain-user access to a U.S. telecommunications equipment supplier; all items are presented as seller claims with pricing and auction terms and pose potential high-impact risks if verified.