<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-30T02:55:41.646616+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd/export</id>
    <title>8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd</title>
    <updated>2026-08-30T02:55:41.668301+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu74dqrndj2u", "content": "\ud83e\udd16 CVE-2026-82222: RCE in the GiveWP WordPress donation plugin. Unauthenticated registration + unserialize gadget chain \u2192 arbitrary code execution. Fixed in 4.16.7.2.\nhttps://www.bleepingcomputer.com/news/security/givewp-wordpress-donation-plugin-flaw-lets-hackers-execute-server-commands/", "creation_timestamp": "2026-08-29T05:09:39.447897Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd/export"/>
    <published>2026-08-29T05:09:39.447897+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ab0fec19-fce8-422b-93b6-81a61198f252/export</id>
    <title>ab0fec19-fce8-422b-93b6-81a61198f252</title>
    <updated>2026-08-30T02:55:41.670212+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ab0fec19-fce8-422b-93b6-81a61198f252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu72ott44y2f", "content": "CVE-2026-82222 - givewp\nThe GiveWP donation plugin for WordPress can be fooled by specially crafted information, allowing an attacker to insert malicious instructions that run on your site. This could give them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#givewp #CVE #infosec", "creation_timestamp": "2026-08-29T04:40:04.447533Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ab0fec19-fce8-422b-93b6-81a61198f252/export"/>
    <published>2026-08-29T04:40:04.447533+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f93647f6-874e-4e07-acf7-e90351568f59/export</id>
    <title>f93647f6-874e-4e07-acf7-e90351568f59</title>
    <updated>2026-08-30T02:55:41.670345+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f93647f6-874e-4e07-acf7-e90351568f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3mu6uv3gyfa2f", "content": "GiveWP CVE-2026-82222: RCE Chain from Unauthenticated Registration to PHP Object Injection https://cstu.io/36a669 #tecnologia #python #google", "creation_timestamp": "2026-08-29T02:56:11.806762Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f93647f6-874e-4e07-acf7-e90351568f59/export"/>
    <published>2026-08-29T02:56:11.806762+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b2284380-2d4a-44b0-b8ff-bae4b4933f33/export</id>
    <title>b2284380-2d4a-44b0-b8ff-bae4b4933f33</title>
    <updated>2026-08-30T02:55:41.670442+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b2284380-2d4a-44b0-b8ff-bae4b4933f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/captainsmok3r_official/506", "content": "GiveWP WordPress donation plugin has a CVSS 10 RCE flaw. CVE-2026-82222: unauthenticated PHP object injection via deserialization. Affects &amp;lt;= 4.16.7.1", "creation_timestamp": "2026-08-29T00:00:07.107418Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b2284380-2d4a-44b0-b8ff-bae4b4933f33/export"/>
    <published>2026-08-29T00:00:07.107418+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4/export</id>
    <title>a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4</title>
    <updated>2026-08-30T02:55:41.670527+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu5jwrpbtc24", "content": "\ud83d\udea8 CVE-2026-82222 \u2014 CVSS 10 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. T...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82222\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T14:07:37.838960Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4/export"/>
    <published>2026-08-28T14:07:37.838960+00:00</published>
  </entry>
</feed>
