https://vulnerability.circl.lu/sightings/feed 2026-10-09T06:44:29.492481+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/68263d8a-dd6c-492d-b958-5508d1c0e4b2/export 2026-10-09T06:44:29.520369+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "68263d8a-dd6c-492d-b958-5508d1c0e4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuooysk27", "content": "CVE-2026-42415 - porto theme - functionality\nThe Porto theme\u2019s Functionality plugin (versions up to 3.9.3) can be accessed by anyone on the internet to insert malicious database queries. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pthemes #CVE #infosec", "creation_timestamp": "2026-10-07T21:40:05.536528Z"} 2026-10-07T21:40:05.536528+00:00 https://vulnerability.circl.lu/sighting/dd55d37b-d8ed-4428-a03c-e6d17f4c47c3/export 2026-10-09T06:44:29.521841+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dd55d37b-d8ed-4428-a03c-e6d17f4c47c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx77yfdbua2a", "content": "CRITICAL: Porto Theme - Functionality \u22643.9.3 vulnerable to unauthenticated SQL injection (CVE-2026-42415). Patch status unconfirmed \u2014 restrict access now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b...", "creation_timestamp": "2026-10-06T10:30:28.668949Z"} 2026-10-06T10:30:28.668949+00:00 https://vulnerability.circl.lu/sighting/5f05d20c-c0c5-4742-954a-b8b2907ac64b/export 2026-10-09T06:44:29.521976+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5f05d20c-c0c5-4742-954a-b8b2907ac64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393498184652638", "content": "CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality \u22643.9.3. Unauthenticated attackers can steal sensitive data. No official patch yet \u2014 restrict access ASAP. https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b18a06bf1443 #OffSeq #CVE202642415 #Infosec #WordPress #SQLInjection", "creation_timestamp": "2026-10-06T10:30:26.803951Z"} 2026-10-06T10:30:26.803951+00:00 https://vulnerability.circl.lu/sighting/0846c4fc-0376-4acf-b4e5-636def78d48c/export 2026-10-09T06:44:29.522085+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0846c4fc-0376-4acf-b4e5-636def78d48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tnht5m2o", "content": "\ud83d\udea8 CVE-2026-42415 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:55.465641Z"} 2026-10-06T10:09:55.465641+00:00