https://vulnerability.circl.lu/sightings/feed 2026-06-25T10:32:43.061286+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fc97b6f4-2c2b-4456-bfa1-1f6721b40048/export 2026-06-25T10:32:43.083505+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fc97b6f4-2c2b-4456-bfa1-1f6721b40048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8417", "type": "published-proof-of-concept", "source": "https://t.me/antichat/7846", "content": "From CSRF to RCE and WordPress-site takeover: CVE-2020-8417\nhttps://blog.wpsec.com/csrf-to-rce-wordpress/", "creation_timestamp": "2020-02-09T21:56:23.000000Z"} 2020-02-09T21:56:23+00:00 https://vulnerability.circl.lu/sighting/c2e55958-64b0-4c35-9a10-2f677a0ad379/export 2026-06-25T10:32:43.083398+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c2e55958-64b0-4c35-9a10-2f677a0ad379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8417", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/3802", "content": "From CSRF to RCE and WordPress-site takeover: CVE-2020-8417\nhttps://blog.wpsec.com/csrf-to-rce-wordpress/", "creation_timestamp": "2020-02-09T22:16:20.000000Z"} 2020-02-09T22:16:20+00:00 https://vulnerability.circl.lu/sighting/a03abd55-9861-4156-84b0-b7b82acd8a81/export 2026-06-25T10:32:43.083271+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a03abd55-9861-4156-84b0-b7b82acd8a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8417", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/611", "content": "#exploit\n1. CVE-2020-7471:\nDjango 1.11 - 1.11.28, 2.2 - 2.2.10, 3.0 - 3.0.3 StringAgg SQL Injection\nhttps://github.com/secoba/DjVul_StringAgg \n\n2. CVE-2020-8417:\nCode Snippets plugin <2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu\nhttps://github.com/vulncrate/wp-codesnippets-cve-2020-8417\nhttps://github.com/Vulnmachines/WordPress_CVE-2020-8417 \n\n3. CVE-2020-9273:\nIn ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel\nhttps://github.com/ptef/CVE-2020-9273", "creation_timestamp": "2024-03-13T13:46:38.000000Z"} 2024-03-13T13:46:38+00:00 https://vulnerability.circl.lu/sighting/2fd3f156-068c-45a7-b9db-60381d1c14bd/export 2026-06-25T10:32:43.083107+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2fd3f156-068c-45a7-b9db-60381d1c14bd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8417", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2ceaa278-56da-4c99-a7d5-8d8573663a87", "content": "", "creation_timestamp": "2026-06-19T12:53:12.918488Z"} 2026-06-19T12:53:12.918488+00:00 https://vulnerability.circl.lu/sighting/40df11ea-9aec-4eb7-833b-cdc932e1574c/export 2026-06-25T10:32:43.080048+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "40df11ea-9aec-4eb7-833b-cdc932e1574c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8417", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dd4bd79d-22f8-4dfe-b23b-548a25bc85bc", "content": "", "creation_timestamp": "2026-06-23T14:04:02.255862Z"} 2026-06-23T14:04:02.255862+00:00