<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-23T21:57:08.055956+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aee6c652-5326-41e0-af6e-225524d85e7a/export</id>
    <title>aee6c652-5326-41e0-af6e-225524d85e7a</title>
    <updated>2026-06-23T21:57:08.073191+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aee6c652-5326-41e0-af6e-225524d85e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6555", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaw35ylzv2n", "content": "\ud83d\udd34 CVE-2026-6555 - Critical (9.8)\n\nThe ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6555/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-20T03:01:19.651889Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aee6c652-5326-41e0-af6e-225524d85e7a/export"/>
    <published>2026-05-20T03:01:19.651889+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0c011534-6c38-4141-b12d-285115fb5531/export</id>
    <title>0c011534-6c38-4141-b12d-285115fb5531</title>
    <updated>2026-06-23T21:57:08.073101+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0c011534-6c38-4141-b12d-285115fb5531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmb4ilpq4u2i", "content": "CVE-2026-6555 - ProSolution WP Client\nCVE ID : CVE-2026-6555\n \n Published : May 20, 2026, 2:16 a.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is ...", "creation_timestamp": "2026-05-20T04:56:08.584217Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0c011534-6c38-4141-b12d-285115fb5531/export"/>
    <published>2026-05-20T04:56:08.584217+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/831edb6a-7b46-45f1-a3cb-4e4574ccc11c/export</id>
    <title>831edb6a-7b46-45f1-a3cb-4e4574ccc11c</title>
    <updated>2026-06-23T21:57:08.072995+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "831edb6a-7b46-45f1-a3cb-4e4574ccc11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6555", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116605729283377935", "content": "\u26a0\ufe0f CRITICAL: CVE-2026-6555 in ProSolution WP Client (\u22642.0.0) lets unauthenticated attackers upload malicious files via multi-file upload flaw \u2014 leading to remote code execution. No patch yet; disable plugin or block uploads. https://radar.offseq.com/threat/cve-2026-6555-cwe-434-unrestricted-upload-of-file--b1cfbc06 #OffSeq #WordPress #RCE", "creation_timestamp": "2026-05-20T07:30:27.289319Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/831edb6a-7b46-45f1-a3cb-4e4574ccc11c/export"/>
    <published>2026-05-20T07:30:27.289319+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/54bde946-01fa-42ab-82c0-3eaa9a0f2888/export</id>
    <title>54bde946-01fa-42ab-82c0-3eaa9a0f2888</title>
    <updated>2026-06-23T21:57:08.072892+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "54bde946-01fa-42ab-82c0-3eaa9a0f2888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6555", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmbf4l45ip2v", "content": "\ud83d\udea8 CRITICAL: ProSolution WP Client plugin \u22642.0.0 has a file upload flaw \u2014 RCE possible! No patch yet. Disable or restrict uploads now. More: https://radar.offseq.com/threat/cve-2026-6555-cwe-434-unrestricted-upload-of-file--b1cfbc06 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-05-20T07:30:29.156267Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/54bde946-01fa-42ab-82c0-3eaa9a0f2888/export"/>
    <published>2026-05-20T07:30:29.156267+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8e8c0f4c-b27e-4f9d-b25e-65eb446b4a18/export</id>
    <title>8e8c0f4c-b27e-4f9d-b25e-65eb446b4a18</title>
    <updated>2026-06-23T21:57:08.072802+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8e8c0f4c-b27e-4f9d-b25e-65eb446b4a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6555", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmgmtwjo6s2s", "content": "CVE-2026-6555 prosolution-wp-client (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-22T09:32:07.539264Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8e8c0f4c-b27e-4f9d-b25e-65eb446b4a18/export"/>
    <published>2026-05-22T09:32:07.539264+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6dfb09b8-ff18-488d-99dd-054329b24900/export</id>
    <title>6dfb09b8-ff18-488d-99dd-054329b24900</title>
    <updated>2026-06-23T21:57:08.072660+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6dfb09b8-ff18-488d-99dd-054329b24900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6555", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mnexgjzryg2k", "content": "\u3010\u7dca\u6025\u3011CVE-2026-6555 ProSolution WP Client plugin for WordPress\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\nCVE-2026-6555 ProSolution WP Client\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u3001\u30d0\u30fc\u30b8\u30e7\u30f32.0.0\u307e\u3067\u306eWordPress\u306b\u304a\u3044\u3066\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306b\u5bfe\u3059\u308b\u8106\u5f31\u6027\u3092\u62b1\u3048\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-06-03T11:03:31.752491Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6dfb09b8-ff18-488d-99dd-054329b24900/export"/>
    <published>2026-06-03T11:03:31.752491+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3dbd7887-7a98-4a0f-b2fa-98e794308a56/export</id>
    <title>3dbd7887-7a98-4a0f-b2fa-98e794308a56</title>
    <updated>2026-06-23T21:57:08.071295+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3dbd7887-7a98-4a0f-b2fa-98e794308a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6555", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motrciqyng2b", "content": "\ud83d\udea8  ALERT: CVE-2026-6555\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0. This is due to an array validation mismatch where only the first file in the upload array undergoes extension and MIME ty", "creation_timestamp": "2026-06-22T01:46:51.798085Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3dbd7887-7a98-4a0f-b2fa-98e794308a56/export"/>
    <published>2026-06-22T01:46:51.798085+00:00</published>
  </entry>
</feed>
