https://vulnerability.circl.lu/sightings/feed 2026-05-10T09:47:04.650438+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6c864136-5ac8-4262-ae65-fb2e8d5ea485/export 2026-05-10T09:47:05.031585+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "6c864136-5ac8-4262-ae65-fb2e8d5ea485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4589", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp6wrhrrbc2t", "content": "", "creation_timestamp": "2025-05-15T06:57:50.499141Z"} 2025-05-15T06:57:50.499141+00:00 https://vulnerability.circl.lu/sighting/0e99d343-5a8c-4948-b5b6-adf20cd7e50e/export 2026-05-10T09:47:05.031475+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "0e99d343-5a8c-4948-b5b6-adf20cd7e50e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4589", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16510", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4589\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Bon Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt-map' shortcode in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-15T03:21:38.214Z\n\ud83d\udccf Modified: 2025-05-15T14:25:58.600Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4cafec05-c275-475d-91cf-ed65cd191b0e?source=cve\n2. https://plugins.trac.wordpress.org/browser/bon-toolkit/trunk/includes/shortcodes.php#L71", "creation_timestamp": "2025-05-15T14:35:11.000000Z"} 2025-05-15T14:35:11+00:00 https://vulnerability.circl.lu/sighting/e0321082-d5f8-4779-875f-53fa17fae500/export 2026-05-10T09:47:05.031367+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "e0321082-d5f8-4779-875f-53fa17fae500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-45890\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter\n\ud83d\udccf Published: 2025-06-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:04:32.513Z\n\ud83d\udd17 References:\n1. https://github.com/SecureCore1/CVE/blob/main/novel-plus/readme.md", "creation_timestamp": "2025-06-20T16:45:03.000000Z"} 2025-06-20T16:45:03+00:00 https://vulnerability.circl.lu/sighting/3d2ce223-98a5-44c1-8687-386416b84f6f/export 2026-05-10T09:47:05.031283+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "3d2ce223-98a5-44c1-8687-386416b84f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls2t3y5mvd2p", "content": "", "creation_timestamp": "2025-06-20T19:57:00.939984Z"} 2025-06-20T19:57:00.939984+00:00 https://vulnerability.circl.lu/sighting/d7d849a5-10a5-47ee-b149-2c5c8be9a8b2/export 2026-05-10T09:47:05.031198+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "d7d849a5-10a5-47ee-b149-2c5c8be9a8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45892", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luvhjyce7d2k", "content": "", "creation_timestamp": "2025-07-26T21:02:23.164117Z"} 2025-07-26T21:02:23.164117+00:00 https://vulnerability.circl.lu/sighting/c4a8edc8-5c3b-465e-bffc-0f06de898bd1/export 2026-05-10T09:47:05.031104+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "c4a8edc8-5c3b-465e-bffc-0f06de898bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45893", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luvhjyexuv2x", "content": "", "creation_timestamp": "2025-07-26T21:02:23.770485Z"} 2025-07-26T21:02:23.770485+00:00 https://vulnerability.circl.lu/sighting/97a85f6e-da89-407e-a242-38de37fae57e/export 2026-05-10T09:47:05.030970+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "97a85f6e-da89-407e-a242-38de37fae57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45893", "type": "seen", "source": "https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9", "content": "", "creation_timestamp": "2026-04-27T20:30:12.000000Z"} 2026-04-27T20:30:12+00:00 https://vulnerability.circl.lu/sighting/48eda564-00ca-4e95-b0d6-deaf2007d3ce/export 2026-05-10T09:47:05.029101+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "48eda564-00ca-4e95-b0d6-deaf2007d3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-45892", "type": "seen", "source": "https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9", "content": "", "creation_timestamp": "2026-04-27T20:30:12.000000Z"} 2026-04-27T20:30:12+00:00