https://vulnerability.circl.lu/sightings/feed 2026-08-19T01:45:24.687724+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/19ed4a6b-d5d4-4bbd-9b39-cef28663bc4f/export 2026-08-19T01:45:24.706081+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "19ed4a6b-d5d4-4bbd-9b39-cef28663bc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/431", "content": "", "creation_timestamp": "2026-08-19T00:00:27.366311Z"} 2026-08-19T00:00:27.366311+00:00 https://vulnerability.circl.lu/sighting/402d58ca-b45e-489a-9fa2-8644e75ba16f/export 2026-08-19T01:45:24.708593+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "402d58ca-b45e-489a-9fa2-8644e75ba16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/432", "content": "python poc-cve-2026-28185.py --host https://test.com/ --code 4/F0ATsMZqBVDRrYEE********** --username admin@test.com", "creation_timestamp": "2026-08-19T00:00:27.333448Z"} 2026-08-19T00:00:27.333448+00:00 https://vulnerability.circl.lu/sighting/caa52caa-de94-49ca-b744-26e9bdcab017/export 2026-08-19T01:45:24.708884+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "caa52caa-de94-49ca-b744-26e9bdcab017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://t.me/captainsmok3r_official/430", "content": "CVE-2026-28185 - \"Log in with Google\" (WordPress) treats an unverified Google email as proof of ownership\nAffected: rtCamp \"Log in with Google\" plugin (slug login-with-google) <= 1.4.2, fixed in 1.4.3\nType: Auth bypass (unauthenticated account takeover, including administrator)", "creation_timestamp": "2026-08-19T00:00:27.299325Z"} 2026-08-19T00:00:27.299325+00:00 https://vulnerability.circl.lu/sighting/5436a845-ebde-41ea-84f9-0ad95c2042c2/export 2026-08-19T01:45:24.709119+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5436a845-ebde-41ea-84f9-0ad95c2042c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/433", "content": "--code: An authorization code already issued by Google (or a fake provider) for an unverified identity.\nTo obtain this --code, simply go to the wp-login.php page and click \"login with Google.\" Then, select the Gmail account you want to use to authorize the admin user access. after that, you will be redirected back to the website, and you will see something like this in the URL:\n\nsite.com/wp-login.php?code=...&state=...\n -> ?code= ...\n--code ...\n?code=...\npython poc-cve-2026-28185.py --host https://site.com/ --code ... --username admin@site.com\n\n \u203c\ufe0f this poc doesn\u2019t require authentication, but you do need to have the admin\u2019s email address of the website(for wp-login.php), and that email address must already exist as an admin account. That makes the process a bit difficult.", "creation_timestamp": "2026-08-19T00:00:27.262630Z"} 2026-08-19T00:00:27.262630+00:00 https://vulnerability.circl.lu/sighting/3a5f7cad-8615-49b3-af63-144e87bdb0b3/export 2026-08-19T01:45:24.709325+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3a5f7cad-8615-49b3-af63-144e87bdb0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/433", "content": "--code: An authorization code already issued by Google (or a fake provider) for an unverified identity.\nTo obtain this --code, simply go to the wp-login.php page and click \"login with Google.\" Then, select the Gmail account you want to use to authorize the admin user access. after that, you will be redirected back to the website, and you will see something like this in the URL:\n\nsite.com/wp-login.php?code=...&state=...\n -> ?code= ...\n--code ...\n?code=...\npython poc-cve-2026-28185.py --host https://site.com/ --code ... --username admin@site.com\n\n \u203c\ufe0f this poc doesn\u2019t require authentication, but you do need to have the admin\u2019s email address of the website(for wp-login.php), and that email address must already exist as an admin account. That makes the process a bit difficult.", "creation_timestamp": "2026-08-18T03:00:03.033860Z"} 2026-08-18T03:00:03.033860+00:00 https://vulnerability.circl.lu/sighting/9a480023-ad6f-4cb4-846f-cda320d27624/export 2026-08-19T01:45:24.709411+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9a480023-ad6f-4cb4-846f-cda320d27624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/431", "content": "", "creation_timestamp": "2026-08-18T02:00:04.324207Z"} 2026-08-18T02:00:04.324207+00:00 https://vulnerability.circl.lu/sighting/e59dd42f-7a90-4647-93c0-73ef99bcf6aa/export 2026-08-19T01:45:24.709470+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e59dd42f-7a90-4647-93c0-73ef99bcf6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/432", "content": "python poc-cve-2026-28185.py --host https://test.com/ --code 4/F0ATsMZqBVDRrYEE********** --username admin@test.com", "creation_timestamp": "2026-08-18T02:00:04.281258Z"} 2026-08-18T02:00:04.281258+00:00 https://vulnerability.circl.lu/sighting/914a627e-a8c5-47f2-b69a-2714e0fa8801/export 2026-08-19T01:45:24.709532+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "914a627e-a8c5-47f2-b69a-2714e0fa8801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://t.me/captainsmok3r_official/430", "content": "CVE-2026-28185 - \"Log in with Google\" (WordPress) treats an unverified Google email as proof of ownership\nAffected: rtCamp \"Log in with Google\" plugin (slug login-with-google) <= 1.4.2, fixed in 1.4.3\nType: Auth bypass (unauthenticated account takeover, including administrator)", "creation_timestamp": "2026-08-18T02:00:04.229727Z"} 2026-08-18T02:00:04.229727+00:00 https://vulnerability.circl.lu/sighting/cdec873e-5649-4375-bfcc-e0509b09a742/export 2026-08-19T01:45:24.709599+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cdec873e-5649-4375-bfcc-e0509b09a742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxwylaa5f2e", "content": "CVE-2026-28185\nIf you use Log in with Google to authenticate users, versions up to 1.4.2 have a security issue. An attacker can potentially bypass login requirements and gain unauthorized access to your application. Update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T15:20:05.975528Z"} 2026-08-13T15:20:05.975528+00:00