https://vulnerability.circl.lu/sightings/feed 2026-08-21T09:24:31.187782+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/be378c2f-a6b7-4a24-b570-c1989d9596eb/export 2026-08-21T09:24:31.212277+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "be378c2f-a6b7-4a24-b570-c1989d9596eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dsvweyrngxjsj", "content": "CVE-2026-15341 - User Session Synchronizer\nCVE ID : CVE-2026-15341\n \n Published : Aug. 15, 2026, 3:16 a.m. | 56\u00a0minutes ago\n \n Description : The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up...", "creation_timestamp": "2026-08-15T04:45:26.792893Z"} 2026-08-15T04:45:26.792893+00:00 https://vulnerability.circl.lu/sighting/1da43064-a20b-485d-a6f3-5c41ff391584/export 2026-08-21T09:24:31.214615+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1da43064-a20b-485d-a6f3-5c41ff391584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt3rxckbjq2z", "content": "WordPress Admins Borrowed Without Consent, Security Team Still Filling Forms\nPANIC 84% | Lag 0.0h | CVE-2026-15341 affects WordPress User Session Synchronizer up to 1.4.0 and allows unauthenticated ac\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-15T04:00:33.999080Z"} 2026-08-15T04:00:33.999080+00:00 https://vulnerability.circl.lu/sighting/e19fdd0f-a61b-4df2-86f9-83bde89661b8/export 2026-08-21T09:24:31.214760+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e19fdd0f-a61b-4df2-86f9-83bde89661b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt3povhrl72e", "content": "CVE-2026-15341 - user session synchronizer\nAn attacker can gain full access to any WordPress account, including administrator accounts, without needing a password. This is possible due to a flaw in the User Session\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rafasashi #CVE #infosec", "creation_timestamp": "2026-08-15T03:20:04.216294Z"} 2026-08-15T03:20:04.216294+00:00 https://vulnerability.circl.lu/sighting/070bf433-fcf8-403f-b788-0926948a86b9/export 2026-08-21T09:24:31.214874+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "070bf433-fcf8-403f-b788-0926948a86b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15341", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3olr7vcm2a", "content": "CRITICAL: rafasashi User Session Synchronizer \u22641.4.0 has an auth bypass flaw (CVE-2026-15341). Attackers can impersonate any user \u2014 including admins. Disable plugin ASAP. https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e...", "creation_timestamp": "2026-08-15T03:00:25.780239Z"} 2026-08-15T03:00:25.780239+00:00 https://vulnerability.circl.lu/sighting/da2df05a-70a3-42a2-9445-9b2733dc03ea/export 2026-08-21T09:24:31.214983+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "da2df05a-70a3-42a2-9445-9b2733dc03ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15341", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097288379770973", "content": "CVE-2026-15341: CRITICAL auth bypass in rafasashi User Session Synchronizer \u22641.4.0. Attackers can impersonate any WP user \u2014 including admins. Disable plugin until fix is released. \ud83d\udd13 https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e5e90d3fb #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-08-15T03:00:23.988997Z"} 2026-08-15T03:00:23.988997+00:00