https://vulnerability.circl.lu/sightings/feed 2026-09-26T22:02:33.976625+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0d51fe38-ff6c-4b38-bcb6-750aa571d534/export 2026-09-26T22:02:34.004736+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0d51fe38-ff6c-4b38-bcb6-750aa571d534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96533", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwgae3z4e32q", "content": "HIGH severity SSRF (CVE-2026-96533) impacts Testimonials Widget <=4.0.4. Unauthenticated attackers can access internal services. Restrict or disable plugin until a fix. https://radar.offseq.com/threat/cve-2026-96533-cwe-918-server-side-request-forgery-ssrf-in-testimonials-widget-de6ac216205e8c74 ...", "creation_timestamp": "2026-09-26T12:00:28.443290Z"} 2026-09-26T12:00:28.443290+00:00 https://vulnerability.circl.lu/sighting/3357d97a-4ab1-4775-b325-002eae345943/export 2026-09-26T22:02:34.007122+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3357d97a-4ab1-4775-b325-002eae345943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96533", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117337228938533400", "content": "CVE-2026-96533: HIGH severity SSRF in Testimonials Widget (<=4.0.4). Unauthenticated users can make the server fetch internal URLs, exposing responses \ud83d\udee1\ufe0f. Disable or restrict plugin until patched. https://radar.offseq.com/threat/cve-2026-96533-cwe-918-server-side-request-forgery-ssrf-in-testimonials-widget-de6ac216205e8c74 #OffSeq #WordPress #SSRF #Infosec", "creation_timestamp": "2026-09-26T12:00:26.296777Z"} 2026-09-26T12:00:26.296777+00:00