<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-25T08:00:57.353181+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5757d439-2607-440b-aee4-839c4ccb71e4/export</id>
    <title>5757d439-2607-440b-aee4-839c4ccb71e4</title>
    <updated>2026-06-25T08:00:57.370323+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5757d439-2607-440b-aee4-839c4ccb71e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mod5tzkdau2o", "content": "CVE-2026-49106 cf7-constant-contact (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T11:16:08.873181Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5757d439-2607-440b-aee4-839c4ccb71e4/export"/>
    <published>2026-06-15T11:16:08.873181+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/db3b7b63-ee09-45e3-abf3-ecd4a3cecf89/export</id>
    <title>db3b7b63-ee09-45e3-abf3-ecd4a3cecf89</title>
    <updated>2026-06-25T08:00:57.370254+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "db3b7b63-ee09-45e3-abf3-ecd4a3cecf89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7loee362e", "content": "CVE-2026-49105 - WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin\nCVE ID : CVE-2026-49105\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in WP Zendesk for Contact Form...", "creation_timestamp": "2026-06-15T21:19:55.685948Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/db3b7b63-ee09-45e3-abf3-ecd4a3cecf89/export"/>
    <published>2026-06-15T21:19:55.685948+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1b020694-7b7d-4be7-a743-8f03b16f0e59/export</id>
    <title>1b020694-7b7d-4be7-a743-8f03b16f0e59</title>
    <updated>2026-06-25T08:00:57.370184+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1b020694-7b7d-4be7-a743-8f03b16f0e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7p24cel2p", "content": "CVE-2026-49106 - WordPress Integration for Contact Form 7 and Constant Contact plugin\nCVE ID : CVE-2026-49106\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact &amp;amp;...", "creation_timestamp": "2026-06-15T21:21:48.595080Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1b020694-7b7d-4be7-a743-8f03b16f0e59/export"/>
    <published>2026-06-15T21:21:48.595080+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d/export</id>
    <title>b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d</title>
    <updated>2026-06-25T08:00:57.370113+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7sn2m4m2e", "content": "CVE-2026-49104 - WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin\nCVE ID : CVE-2026-49104\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integra...", "creation_timestamp": "2026-06-15T21:23:49.112344Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d/export"/>
    <published>2026-06-15T21:23:49.112344+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e39032c2-ead1-44a9-b726-80016d1c666f/export</id>
    <title>e39032c2-ead1-44a9-b726-80016d1c666f</title>
    <updated>2026-06-25T08:00:57.370012+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e39032c2-ead1-44a9-b726-80016d1c666f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7wiafh22m", "content": "CVE-2026-49109 - WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin\nCVE ID : CVE-2026-49109\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integration fo...", "creation_timestamp": "2026-06-15T21:25:58.131637Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e39032c2-ead1-44a9-b726-80016d1c666f/export"/>
    <published>2026-06-15T21:25:58.131637+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ee0855f0-554d-4f93-9f84-8ec2ad2aa093/export</id>
    <title>ee0855f0-554d-4f93-9f84-8ec2ad2aa093</title>
    <updated>2026-06-25T08:00:57.369858+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ee0855f0-554d-4f93-9f84-8ec2ad2aa093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49104", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohttuu3tp2c", "content": "\ud83d\udd34 CVE-2026-49104 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPF...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49104/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:25.867045Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ee0855f0-554d-4f93-9f84-8ec2ad2aa093/export"/>
    <published>2026-06-17T08:00:25.867045+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/619bb9da-6f76-4889-9567-ee1c49352f0f/export</id>
    <title>619bb9da-6f76-4889-9567-ee1c49352f0f</title>
    <updated>2026-06-25T08:00:57.369686+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "619bb9da-6f76-4889-9567-ee1c49352f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohtu3wyo725", "content": "\ud83d\udd34 CVE-2026-49105 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formid...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:33.315987Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/619bb9da-6f76-4889-9567-ee1c49352f0f/export"/>
    <published>2026-06-17T08:00:33.315987+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1f071bdd-778e-4cd3-a694-34060ff32de0/export</id>
    <title>1f071bdd-778e-4cd3-a694-34060ff32de0</title>
    <updated>2026-06-25T08:00:57.369508+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1f071bdd-778e-4cd3-a694-34060ff32de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohtugcktz2t", "content": "\ud83d\udd34 CVE-2026-49106 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact &amp;lt;=...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49106/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:44.804502Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1f071bdd-778e-4cd3-a694-34060ff32de0/export"/>
    <published>2026-06-17T08:00:44.804502+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/58be1c7d-0926-4e7c-a7df-4c553dc89f44/export</id>
    <title>58be1c7d-0926-4e7c-a7df-4c553dc89f44</title>
    <updated>2026-06-25T08:00:57.369290+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "58be1c7d-0926-4e7c-a7df-4c553dc89f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49109", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moi2kgsr2u2k", "content": "\ud83d\udd34 CVE-2026-49109 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, E...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49109/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T10:01:03.658988Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/58be1c7d-0926-4e7c-a7df-4c553dc89f44/export"/>
    <published>2026-06-17T10:01:03.658988+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1f7c41dc-423d-4e42-8a33-684b64c43d90/export</id>
    <title>1f7c41dc-423d-4e42-8a33-684b64c43d90</title>
    <updated>2026-06-25T08:00:57.367522+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1f7c41dc-423d-4e42-8a33-684b64c43d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moik3lnzzg2c", "content": "CVE-2026-49107 - WordPress Thrive Apprentice plugin\nCVE ID : CVE-2026-49107\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Thrive Apprentice &amp;lt; 10.8.10.2 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visi...", "creation_timestamp": "2026-06-17T14:38:26.006390Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1f7c41dc-423d-4e42-8a33-684b64c43d90/export"/>
    <published>2026-06-17T14:38:26.006390+00:00</published>
  </entry>
</feed>
