https://vulnerability.circl.lu/sightings/feed 2026-08-20T00:37:20.378466+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/283e533e-c921-41b9-9ae8-3506bf29fd72/export 2026-08-20T00:37:20.401808+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "283e533e-c921-41b9-9ae8-3506bf29fd72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "Telegram/yVQLpMg2DCmEsahM2p8kyXYCXocCayarh_UcNeEOoo7GmA", "content": "", "creation_timestamp": "2026-08-20T00:00:06.955776Z"} 2026-08-20T00:00:06.955776+00:00 https://vulnerability.circl.lu/sighting/116e6a94-5c9b-4669-bea3-febbdabb672d/export 2026-08-20T00:37:20.404209+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "116e6a94-5c9b-4669-bea3-febbdabb672d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "Telegram/yVQLpMg2DCmEsahM2p8kyXYCXocCayarh_UcNeEOoo7GmA", "content": "", "creation_timestamp": "2026-08-19T23:00:04.929147Z"} 2026-08-19T23:00:04.929147+00:00 https://vulnerability.circl.lu/sighting/55b60971-0431-44e1-95b9-28511dc93106/export 2026-08-20T00:37:20.404467+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "55b60971-0431-44e1-95b9-28511dc93106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mtg5u2ou532w", "content": "\ud83d\udce2 [VULN] 600 000 sites WordPress menac\u00e9s par une faille critique dans Forminator Forms CVE-2026-15748\n\nUne faille critique touche Forminator Forms, une extension WordPress utilis\u00e9e sur plus de 600 000 sites.\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "creation_timestamp": "2026-08-19T07:00:07.447068Z"} 2026-08-19T07:00:07.447068+00:00 https://vulnerability.circl.lu/sighting/afd2d59a-3d35-4e79-95bc-766676bb5c97/export 2026-08-20T00:37:20.404706+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "afd2d59a-3d35-4e79-95bc-766676bb5c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15748", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mtfxx7avej2q", "content": "Critical WordPress Alert: Dissecting CVE-2026-15748 (Forminator RCE) & CVE-2026-15826 (UPB Auth\u00a0Bypass)\n\nCVE-2026-15748 enables critical Forminator RCE, while CVE-2026-15826 allows User Profile\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-15748-forminator-rce-cve-2026-15826-user-profile-builder/", "creation_timestamp": "2026-08-19T05:14:30.821942Z"} 2026-08-19T05:14:30.821942+00:00 https://vulnerability.circl.lu/sighting/eb527c3c-e019-4b61-8a26-f9e72e15e68a/export 2026-08-20T00:37:20.404882+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "eb527c3c-e019-4b61-8a26-f9e72e15e68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "Telegram/ZxcQ6RVn-5sFAZ4qkLho0f4GJRaaxyJWc-8e0k9Lah5Vjrw", "content": "", "creation_timestamp": "2026-08-19T00:00:27.220991Z"} 2026-08-19T00:00:27.220991+00:00 https://vulnerability.circl.lu/sighting/156651a9-bfd4-4328-aebe-e4001b6a8f59/export 2026-08-20T00:37:20.404994+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "156651a9-bfd4-4328-aebe-e4001b6a8f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-19T00:00:27.153894Z"} 2026-08-19T00:00:27.153894+00:00 https://vulnerability.circl.lu/sighting/98ab8188-dda8-488d-a80f-4f492097be08/export 2026-08-20T00:37:20.405091+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "98ab8188-dda8-488d-a80f-4f492097be08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mte7mlga4k23", "content": "\u26a0\ufe0f PATCH NOW\n\nForminator, a WordPress form plugin on 600,000+ sites, has a critical flaw: a stranger can upload a PHP file and run code, no login needed.\n\nAffects versions up to 1.56.1. Fix: update to 1.56.2 now. (CVE-2026-15748)", "creation_timestamp": "2026-08-18T12:26:24.813539Z"} 2026-08-18T12:26:24.813539+00:00 https://vulnerability.circl.lu/sighting/c8d144e5-c68c-43c9-b52b-156e1a4fbfd8/export 2026-08-20T00:37:20.405186+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c8d144e5-c68c-43c9-b52b-156e1a4fbfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117116485016843298", "content": "It is possible to see elevated activities targeting WPMU DEV Forminator Forms Plugin (CVE-2026-15748) https://vuldb.com/vuln/391522/cti", "creation_timestamp": "2026-08-18T12:22:20.998475Z"} 2026-08-18T12:22:20.998475+00:00 https://vulnerability.circl.lu/sighting/86ce57ca-112b-4643-a0af-8935986ad4e2/export 2026-08-20T00:37:20.405279+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "86ce57ca-112b-4643-a0af-8935986ad4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "https://bsky.app/profile/cyberthreats.bsky.social/post/3mte4iqn4572p", "content": "300K WordPress sites at risk from CVE-2026-15748 \u2014 a critical file upload flaw letting unauthenticated attackers run malicious code. Patch your form plugins now. \u26a0\ufe0f #cybersecurity #infosec #CVE #WordPress Read more -> cyberthreats247.com", "creation_timestamp": "2026-08-18T11:30:34.581751Z"} 2026-08-18T11:30:34.581751+00:00 https://vulnerability.circl.lu/sighting/ad54adff-6016-4dba-9c2c-b3064f021ad0/export 2026-08-20T00:37:20.405378+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ad54adff-6016-4dba-9c2c-b3064f021ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mtdu47zym62x", "content": "Nieuw ernstig beveiligingslek in populaire WordPress-plugin Forminator Forms maa\n\nEen kritiek beveiligingslek, aangeduid als CVE-2026-15748, is ontdekt in de Forminator Forms WordPress-plugin, dat versies 1.56.1 en ouder treft. Met een CVSS-score van 9.8 vormt dit een zeer ernstig risico voo...", "creation_timestamp": "2026-08-18T09:00:24.858014Z"} 2026-08-18T09:00:24.858014+00:00