<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-05T22:35:54.116268+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e85c1e26-f4fb-4d9d-a1bc-b701702fddb5/export</id>
    <title>e85c1e26-f4fb-4d9d-a1bc-b701702fddb5</title>
    <updated>2026-09-05T22:35:54.138237+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e85c1e26-f4fb-4d9d-a1bc-b701702fddb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13447", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muqzji42p22j", "content": "\ud83d\udea8 CVE-2026-13447 \u2014 CVSS 9.8 CRITICAL\n\nThe Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-13447\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T08:07:05.962071Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e85c1e26-f4fb-4d9d-a1bc-b701702fddb5/export"/>
    <published>2026-09-05T08:07:05.962071+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/637b948a-7f53-4a2d-bac1-6c4df30fbfcf/export</id>
    <title>637b948a-7f53-4a2d-bac1-6c4df30fbfcf</title>
    <updated>2026-09-05T22:35:54.143095+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "637b948a-7f53-4a2d-bac1-6c4df30fbfcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13447", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqvtacecv2r", "content": "\ud83d\udd34 CVE-2026-13447 - Critical (9.8)\n\nThe Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in ver...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13447/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T07:00:59.075728Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/637b948a-7f53-4a2d-bac1-6c4df30fbfcf/export"/>
    <published>2026-09-05T07:00:59.075728+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/76467256-c937-4c4d-a9ee-28d7ace92676/export</id>
    <title>76467256-c937-4c4d-a9ee-28d7ace92676</title>
    <updated>2026-09-05T22:35:54.143248+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "76467256-c937-4c4d-a9ee-28d7ace92676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13447", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dghf35suimr5u", "content": "CVE-2026-13447 - MStore API\nCVE ID : CVE-2026-13447\n \n Published : Sept. 5, 2026, 6:17 a.m. | 20\u00a0minutes ago\n \n Description : The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to miss...", "creation_timestamp": "2026-09-05T06:50:58.597803Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/76467256-c937-4c4d-a9ee-28d7ace92676/export"/>
    <published>2026-09-05T06:50:58.597803+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08a31fdd-df5f-4c02-a828-03942aad8ff5/export</id>
    <title>08a31fdd-df5f-4c02-a828-03942aad8ff5</title>
    <updated>2026-09-05T22:35:54.143359+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08a31fdd-df5f-4c02-a828-03942aad8ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13447", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muqruhtbcn2g", "content": "CVE-2026-13447 - mstore api \u2013 create native android &amp;amp; ios apps on the cloud\nThe MStore API plugin for WordPress (up to version 4.20.0) does not properly check the digital signature on login tokens. This lets anyone\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#inspireui #CVE #infosec", "creation_timestamp": "2026-09-05T05:50:05.419386Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08a31fdd-df5f-4c02-a828-03942aad8ff5/export"/>
    <published>2026-09-05T05:50:05.419386+00:00</published>
  </entry>
</feed>
