<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-13T11:11:36.491942+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a3452a33-a545-44c7-8faf-3bc2f8c36983/export</id>
    <title>a3452a33-a545-44c7-8faf-3bc2f8c36983</title>
    <updated>2026-09-13T11:11:36.511809+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a3452a33-a545-44c7-8faf-3bc2f8c36983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101195", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-75865\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 07:53:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload -&amp;gt; RCE in WPLP Cookie Consent (gdpr-cookie-consent) &amp;lt;= 4.4.1 - technical write-up and PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:51.331609Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a3452a33-a545-44c7-8faf-3bc2f8c36983/export"/>
    <published>2026-09-06T00:00:51.331609+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/83ae6f62-dde5-4358-923a-3e97b3d7903f/export</id>
    <title>83ae6f62-dde5-4358-923a-3e97b3d7903f</title>
    <updated>2026-09-13T11:11:36.514021+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "83ae6f62-dde5-4358-923a-3e97b3d7903f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "Telegram/dpgHxQKToET6DYqvRQ6MEfWshfz0qOTKTnxbqKSRBdQu0rw", "content": "", "creation_timestamp": "2026-09-06T00:00:15.853821Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/83ae6f62-dde5-4358-923a-3e97b3d7903f/export"/>
    <published>2026-09-06T00:00:15.853821+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7bec55c9-3fe3-4985-a31a-c4c7e446b1c7/export</id>
    <title>7bec55c9-3fe3-4985-a31a-c4c7e446b1c7</title>
    <updated>2026-09-13T11:11:36.514266+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7bec55c9-3fe3-4985-a31a-c4c7e446b1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "published-proof-of-concept", "source": "Telegram/dpgHxQKToET6DYqvRQ6MEfWshfz0qOTKTnxbqKSRBdQu0rw", "content": "", "creation_timestamp": "2026-09-05T22:00:05.857496Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7bec55c9-3fe3-4985-a31a-c4c7e446b1c7/export"/>
    <published>2026-09-05T22:00:05.857496+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/36c05908-7d51-46cd-ac8c-6490cc18f81d/export</id>
    <title>36c05908-7d51-46cd-ac8c-6490cc18f81d</title>
    <updated>2026-09-13T11:11:36.514469+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "36c05908-7d51-46cd-ac8c-6490cc18f81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://t.me/GithubRedTeam/101195", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-75865\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 07:53:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload -&amp;gt; RCE in WPLP Cookie Consent (gdpr-cookie-consent) &amp;lt;= 4.4.1 - technical write-up and PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T09:00:05.216859Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/36c05908-7d51-46cd-ac8c-6490cc18f81d/export"/>
    <published>2026-09-05T09:00:05.216859+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fd11fc0d-e510-4dad-b0e5-585ce08b3754/export</id>
    <title>fd11fc0d-e510-4dad-b0e5-585ce08b3754</title>
    <updated>2026-09-13T11:11:36.514693+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fd11fc0d-e510-4dad-b0e5-585ce08b3754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mugkfysm2k2e", "content": "CVE-2026-75865 - wplp cookie consent \u2013 cookie banner &amp;amp; consent management for gdpr, ccpa &amp;amp; google consent mode\nThe cookie consent plugin for WordPress can be tricked into accepting any file type, and the upload\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wplegalpages #CVE #infosec", "creation_timestamp": "2026-09-01T04:10:05.674323Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fd11fc0d-e510-4dad-b0e5-585ce08b3754/export"/>
    <published>2026-09-01T04:10:05.674323+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7ceabdcb-4bda-488b-ba2a-e4d367237398/export</id>
    <title>7ceabdcb-4bda-488b-ba2a-e4d367237398</title>
    <updated>2026-09-13T11:11:36.514905+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7ceabdcb-4bda-488b-ba2a-e4d367237398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mugkarjvjb2b", "content": "\ud83d\udea8 CVE-2026-75865 \u2014 CVSS 9.8 CRITICAL\n\nThe WPLP Cookie Consent \u2013 Cookie Banner &amp;amp; Consent Management for GDPR, CCPA &amp;amp; Google Consent Mode plugin fo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75865\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T04:07:10.350623Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7ceabdcb-4bda-488b-ba2a-e4d367237398/export"/>
    <published>2026-09-01T04:07:10.350623+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/741e20fe-142e-4642-ac7d-b9e9b73a612c/export</id>
    <title>741e20fe-142e-4642-ac7d-b9e9b73a612c</title>
    <updated>2026-09-13T11:11:36.515095+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "741e20fe-142e-4642-ac7d-b9e9b73a612c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mugk44tbld2w", "content": "Critical Cookie Banner Flaw, Because Even Consent Pages Bleed Out\nPANIC 78% | Lag 0.0h | A critical CVE-2026-75865 vulnerability has been reported in the WPLP Cookie Consent plugin, with a \n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-01T04:04:34.177321Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/741e20fe-142e-4642-ac7d-b9e9b73a612c/export"/>
    <published>2026-09-01T04:04:34.177321+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/24a51c75-4fa2-4371-ba9c-a50d7c6ba730/export</id>
    <title>24a51c75-4fa2-4371-ba9c-a50d7c6ba730</title>
    <updated>2026-09-13T11:11:36.515278+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "24a51c75-4fa2-4371-ba9c-a50d7c6ba730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75865", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mugjttrvhg2u", "content": "\ud83d\udd34 CVE-2026-75865 - Critical (9.8)\n\nThe WPLP Cookie Consent \u2013 Cookie Banner &amp;amp; Consent Management for GDPR, CCPA &amp;amp; Google Consent Mo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75865/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T03:59:58.106665Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/24a51c75-4fa2-4371-ba9c-a50d7c6ba730/export"/>
    <published>2026-09-01T03:59:58.106665+00:00</published>
  </entry>
</feed>
