https://vulnerability.circl.lu/sightings/feed 2026-08-20T23:44:46.561560+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9/export 2026-08-20T23:44:46.587516+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt3w6fnmex24", "content": "CVE-2026-12949 wishlist-member-x (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T05:16:07.270769Z"} 2026-08-15T05:16:07.270769+00:00 https://vulnerability.circl.lu/sighting/977e3afa-2ab2-451b-ab2d-a283ce233324/export 2026-08-20T23:44:46.589783+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "977e3afa-2ab2-451b-ab2d-a283ce233324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117093756935891127", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:03:25.062651Z"} 2026-08-14T12:03:25.062651+00:00 https://vulnerability.circl.lu/sighting/74313d29-f5fd-4d92-b1bb-b50b9a35f764/export 2026-08-20T23:44:46.589903+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "74313d29-f5fd-4d92-b1bb-b50b9a35f764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt24fs2nxu2p", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:02:19.079619Z"} 2026-08-14T12:02:19.079619+00:00 https://vulnerability.circl.lu/sighting/1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b/export 2026-08-20T23:44:46.589999+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszyz3h5fs24", "content": "\ud83d\udd34 CVE-2026-12949 - Critical (9.8)\n\nThe Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verif...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12949/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T11:01:30.647128Z"} 2026-08-14T11:01:30.647128+00:00 https://vulnerability.circl.lu/sighting/0ce8d571-c4d6-4086-8208-c2c0eedad1d3/export 2026-08-20T23:44:46.590086+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0ce8d571-c4d6-4086-8208-c2c0eedad1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mszi63vvkp2y", "content": "CVE-2026-12949 - wishlist member\nA security flaw in Wishlist Member plugin for WordPress versions up to 3.34.1 allows attackers to take over any WordPress account, including administrator accounts, by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wishlistmember #CVE #infosec", "creation_timestamp": "2026-08-14T06:00:04.973946Z"} 2026-08-14T06:00:04.973946+00:00