https://vulnerability.circl.lu/sightings/feed 2026-06-02T03:33:06.085342+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b815935e-031a-4d45-9af5-b422b879bd85/export 2026-06-02T03:33:06.563515+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b815935e-031a-4d45-9af5-b422b879bd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3849", "type": "seen", "source": "https://t.me/cibsecurity/53572", "content": "\u203c CVE-2022-3849 \u203c\n\nThe WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-28T16:28:10.000000Z"} 2022-11-28T16:28:10+00:00 https://vulnerability.circl.lu/sighting/d2bb84a2-04f1-457f-8cc5-8df84f9aea61/export 2026-06-02T03:33:06.563378+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d2bb84a2-04f1-457f-8cc5-8df84f9aea61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38490", "type": "seen", "source": "https://t.me/cibsecurity/56257", "content": "\u203c CVE-2022-38490 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:28:50.000000Z"} 2023-01-11T00:28:50+00:00 https://vulnerability.circl.lu/sighting/f9779617-c401-4c06-8c85-b90094b53fc3/export 2026-06-02T03:33:06.563228+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f9779617-c401-4c06-8c85-b90094b53fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38491", "type": "seen", "source": "https://t.me/cibsecurity/56264", "content": "\u203c CVE-2022-38491 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:28:58.000000Z"} 2023-01-11T00:28:58+00:00 https://vulnerability.circl.lu/sighting/0e722e4e-94cf-4c9b-a2c6-a9f6595bba6d/export 2026-06-02T03:33:06.563018+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0e722e4e-94cf-4c9b-a2c6-a9f6595bba6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38492", "type": "seen", "source": "https://t.me/cibsecurity/56280", "content": "\u203c CVE-2022-38492 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 before 2022.1.110.1.02. One parameter allows SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:34:56.000000Z"} 2023-01-11T00:34:56+00:00 https://vulnerability.circl.lu/sighting/fee014af-5781-43c4-8974-7ec2f347245a/export 2026-06-02T03:33:06.558634+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fee014af-5781-43c4-8974-7ec2f347245a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3849", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3849\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin\n\ud83d\udccf Published: 2022-11-28T13:47:16.821Z\n\ud83d\udccf Modified: 2025-04-28T18:09:28.086Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/511327d3-499b-4ad9-8fd3-99f9f7deb4f5\n2. https://bulletin.iese.de/post/wp-user-merger_1-5-1_3/", "creation_timestamp": "2025-04-28T18:10:51.000000Z"} 2025-04-28T18:10:51+00:00