https://vulnerability.circl.lu/sightings/feed 2026-06-04T08:13:52.291732+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/dd67c5b1-aa24-4dd4-a7a0-b928e4c62bf0/export 2026-06-04T08:13:52.689114+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dd67c5b1-aa24-4dd4-a7a0-b928e4c62bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8293", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116679339265385389", "content": "\ud83d\udd0e HIGH severity: CVE-2026-8293 in Really Simple Security WP plugin (<9.5.10.1) allows 2FA bypass via REST endpoints if password is known. Update to 9.5.10.1+ or disable affected endpoints. https://radar.offseq.com/threat/cve-2026-8293-cwe-287-improper-authentication-in-r-fe9aba14 #OffSeq #WordPress #CVE20268293 #Security", "creation_timestamp": "2026-06-02T07:30:26.994261Z"} 2026-06-02T07:30:26.994261+00:00 https://vulnerability.circl.lu/sighting/067184a9-66c3-4a91-bdef-389630909293/export 2026-06-04T08:13:52.688965+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "067184a9-66c3-4a91-bdef-389630909293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8293", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnc36jcnba2k", "content": "Really Simple Security WP plugin (<9.5.10.1) has a HIGH severity 2FA bypass flaw. Attackers with a valid password can skip email OTP. Update ASAP or disable risky endpoints. https://radar.offseq.com/threat/cve-2026-8293-cwe-287-improper-authentication-in-r-fe9aba14 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-06-02T07:30:28.502756Z"} 2026-06-02T07:30:28.502756+00:00 https://vulnerability.circl.lu/sighting/4c9b83f3-1882-4ebf-a889-62d631c44238/export 2026-06-04T08:13:52.687128+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4c9b83f3-1882-4ebf-a889-62d631c44238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mncclxnq2l2d", "content": "CVE-2026-8293 - Really Simple Security\nCVE ID : CVE-2026-8293\n \n Published : June 2, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor auth...", "creation_timestamp": "2026-06-02T09:43:15.364651Z"} 2026-06-02T09:43:15.364651+00:00