<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-03T16:16:28.488852+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1850f1ab-fa15-4399-9f2d-4d99e16dc83f/export</id>
    <title>1850f1ab-fa15-4399-9f2d-4d99e16dc83f</title>
    <updated>2026-09-03T16:16:28.517687+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1850f1ab-fa15-4399-9f2d-4d99e16dc83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66587", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtti36wmcg25", "content": "\ud83d\udea8 CVE-2026-66587 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Local File Inclusion in WP Cafe Pro &amp;lt; 3.0.15 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66587\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T14:07:40.759324Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1850f1ab-fa15-4399-9f2d-4d99e16dc83f/export"/>
    <published>2026-08-24T14:07:40.759324+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f529ab5a-4ad8-4816-86b6-cde6f0f3ad8c/export</id>
    <title>f529ab5a-4ad8-4816-86b6-cde6f0f3ad8c</title>
    <updated>2026-09-03T16:16:28.519689+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f529ab5a-4ad8-4816-86b6-cde6f0f3ad8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66587", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttdqhzsjc25", "content": "CVE-2026-66587 - wp cafe pro\nThe WP Cafe Pro add\u2011on for WordPress, in any version older than 3.0.15, lets anyone on the internet view files stored on your web server. This could reveal sensitive information such as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wpcafe #CVE #infosec", "creation_timestamp": "2026-08-24T12:50:05.736309Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f529ab5a-4ad8-4816-86b6-cde6f0f3ad8c/export"/>
    <published>2026-08-24T12:50:05.736309+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/203bab6a-58c1-4381-a997-ecf18cbfa829/export</id>
    <title>203bab6a-58c1-4381-a997-ecf18cbfa829</title>
    <updated>2026-09-03T16:16:28.519830+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "203bab6a-58c1-4381-a997-ecf18cbfa829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ye6egmacr3iu", "content": "CVE-2026-66587 - WordPress WP Cafe Pro plugin\nCVE ID : CVE-2026-66587\n \n Published : Aug. 24, 2026, 11:54 a.m. | 6\u00a0minutes ago\n \n Description : Unauthenticated Local File Inclusion in WP Cafe Pro &amp;lt; 3.0.15 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for more deta...", "creation_timestamp": "2026-08-24T12:06:46.792474Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/203bab6a-58c1-4381-a997-ecf18cbfa829/export"/>
    <published>2026-08-24T12:06:46.792474+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7278db94-cb49-47b0-aa92-ac62a160f6dd/export</id>
    <title>7278db94-cb49-47b0-aa92-ac62a160f6dd</title>
    <updated>2026-09-03T16:16:28.519945+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7278db94-cb49-47b0-aa92-ac62a160f6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66582", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117133882319199310", "content": "CVE-2026-66582 - Unauthenticated XSS in TranslatePress \u22643.3.2. CVSS 7.1. No patch yet. Disable or restrict access now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66582/", "creation_timestamp": "2026-08-21T14:06:44.344005Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7278db94-cb49-47b0-aa92-ac62a160f6dd/export"/>
    <published>2026-08-21T14:06:44.344005+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6235fc1a-21f9-49fe-8daf-f023e0460f6c/export</id>
    <title>6235fc1a-21f9-49fe-8daf-f023e0460f6c</title>
    <updated>2026-09-03T16:16:28.520045+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6235fc1a-21f9-49fe-8daf-f023e0460f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66582", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtlwmpi4ck2o", "content": "CVE-2026-66582 - Unauthenticated XSS in TranslatePress \u22643.3.2. CVSS 7.1. No patch yet. Disable or restrict access now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66582/", "creation_timestamp": "2026-08-21T14:06:42.756357Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6235fc1a-21f9-49fe-8daf-f023e0460f6c/export"/>
    <published>2026-08-21T14:06:42.756357+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86b62130-2fe4-416d-b02e-c39835c10c2e/export</id>
    <title>86b62130-2fe4-416d-b02e-c39835c10c2e</title>
    <updated>2026-09-03T16:16:28.520145+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86b62130-2fe4-416d-b02e-c39835c10c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66583", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtjg7f6rkp2t", "content": "\ud83d\udea8 CVE-2026-66583 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Forminator &amp;lt;= 1.57.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66583\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T14:07:36.403488Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86b62130-2fe4-416d-b02e-c39835c10c2e/export"/>
    <published>2026-08-20T14:07:36.403488+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/26b17cda-e90b-47c7-8c99-939979af41f3/export</id>
    <title>26b17cda-e90b-47c7-8c99-939979af41f3</title>
    <updated>2026-09-03T16:16:28.520245+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "26b17cda-e90b-47c7-8c99-939979af41f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66583", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjdkfcfze2m", "content": "CVE-2026-66583 - forminator\nThe Forminator add\u2011on for WordPress, in versions up through 1.57.0, can be fooled by anyone on the internet to insert harmful data that makes the website run unwanted code.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#forminator #wpmudev #CVE #infosec", "creation_timestamp": "2026-08-20T13:20:04.817521Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/26b17cda-e90b-47c7-8c99-939979af41f3/export"/>
    <published>2026-08-20T13:20:04.817521+00:00</published>
  </entry>
</feed>
