https://vulnerability.circl.lu/sightings/feed 2026-08-11T10:56:43.151407+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4ba7a6fb-f0b6-4cb4-82f1-6eeb8223a38a/export 2026-08-11T10:56:43.176894+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4ba7a6fb-f0b6-4cb4-82f1-6eeb8223a38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://bsky.app/profile/rswebsols.bsky.social/post/3mssce4juqv2p", "content": "CVE-2026-64638: Severe Pre-Authentication XSS Flaw in WordPress Permits Remote Code Execution \u2013 Immediate Update to Version 7.0.3 #wordpress #programming", "creation_timestamp": "2026-08-11T09:27:26.517792Z"} 2026-08-11T09:27:26.517792+00:00 https://vulnerability.circl.lu/sighting/8acee140-d008-4fed-98f4-56deb970e590/export 2026-08-11T10:56:43.178129+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8acee140-d008-4fed-98f4-56deb970e590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://bsky.app/profile/zonacerdas.bsky.social/post/3msrzg5sc6x2h", "content": "XSS2Shell Ancam WordPress: Celah CVE-2026-64638 Berstatus High dengan Skor CVSS\u00a08,9\n\nKAMPAR, Pengguna WordPress perlu meningkatkan kewaspadaan setelah ditemukannya kerentanan keamanan CVE-2026-64638, yang dikenal dalam riset keamanan sebagai XSS2Shell. Kerentanan pada WordPress Core tersebut\u2026", "creation_timestamp": "2026-08-11T06:47:31.626780Z"} 2026-08-11T06:47:31.626780+00:00 https://vulnerability.circl.lu/sighting/a8085b43-b28a-42c8-8cd1-76f174fdc5aa/export 2026-08-11T10:56:43.178227+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a8085b43-b28a-42c8-8cd1-76f174fdc5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msrnwhptkf2b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-64564: 28 interactions\nCVE-2026-64638: 18 interactions\nCVE-2026-18577: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2021-34501: 2 interactions\nCVE-2026-19433: 2 interactions\nCVE-2026-65545: 2 interactions\n", "creation_timestamp": "2026-08-11T03:21:53.392274Z"} 2026-08-11T03:21:53.392274+00:00 https://vulnerability.circl.lu/sighting/46cb9b9b-ed8f-4f2e-b3fd-888f7925e29c/export 2026-08-11T10:56:43.178304+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "46cb9b9b-ed8f-4f2e-b3fd-888f7925e29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-poc-pubblico-per-lo-sfruttamento-della-cve-2026-64638", "content": "Disponibile un Proof of Concept (PoC) per la vulnerabilit\u00e0 identificata dalla CVE-2026-64638, gi\u00e0 sanata dal vendor, che interessa il noto CMS WordPress.", "creation_timestamp": "2026-08-11T01:00:36.255273Z"} 2026-08-11T01:00:36.255273+00:00 https://vulnerability.circl.lu/sighting/4eccc546-936b-4b71-af1f-4be9247ce52c/export 2026-08-11T10:56:43.178377+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4eccc546-936b-4b71-af1f-4be9247ce52c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97493", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a XSS2Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a g0d150ne\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 21:08:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nXSS2Shell ULTIMATE v3.0 is a powerful exploitation tool that chains Cross-Site Scripting (XSS) vulnerabilities in WordPress to achieve Remote Code Execution (RCE). This tool exploits CVE-2026-64638 to gain full control over vulnerable WordPress installations.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T00:00:06.670003Z"} 2026-08-11T00:00:06.670003+00:00 https://vulnerability.circl.lu/sighting/fec2413a-cb11-42fc-aee3-f79476f23aa1/export 2026-08-11T10:56:43.178465+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fec2413a-cb11-42fc-aee3-f79476f23aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-64638.yaml", "content": "", "creation_timestamp": "2026-08-11T00:00:05.495258Z"} 2026-08-11T00:00:05.495258+00:00 https://vulnerability.circl.lu/sighting/d730eaec-7366-49d2-a842-55ba81c9f00d/export 2026-08-11T10:56:43.178537+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d730eaec-7366-49d2-a842-55ba81c9f00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://t.me/GithubRedTeam/97493", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a XSS2Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a g0d150ne\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 21:08:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nXSS2Shell ULTIMATE v3.0 is a powerful exploitation tool that chains Cross-Site Scripting (XSS) vulnerabilities in WordPress to achieve Remote Code Execution (RCE). This tool exploits CVE-2026-64638 to gain full control over vulnerable WordPress installations.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-10T23:00:03.152658Z"} 2026-08-10T23:00:03.152658+00:00 https://vulnerability.circl.lu/sighting/11e4c99f-3883-4fd3-818b-98455e6b35b8/export 2026-08-11T10:56:43.178618+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "11e4c99f-3883-4fd3-818b-98455e6b35b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msqojwgmkk24", "content": "\ud83d\udce2 XSS2Shell : cha\u00eene XSS pr\u00e9-auth vers RCE sur WordPress Core (CVE-2026-64638)\n\nCet article d\u00e9taille la d\u00e9couverte et l'exploitation compl\u00e8te d'une cha\u00eene de vuln\u00e9rabilit\u00e9s baptis\u00e9e XSS2Shell, affectant WordPress Core dans toutes ses\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#RCE #WordPress #Cyberveille", "creation_timestamp": "2026-08-10T18:00:06.694748Z"} 2026-08-10T18:00:06.694748+00:00 https://vulnerability.circl.lu/sighting/d8a58627-b8bd-4266-a918-622474445e57/export 2026-08-11T10:56:43.178688+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "d8a58627-b8bd-4266-a918-622474445e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-792", "content": "", "creation_timestamp": "2026-08-10T16:15:12.618417Z"} 2026-08-10T16:15:12.618417+00:00 https://vulnerability.circl.lu/sighting/e8ca30cb-9993-4d24-83e2-99f4be06d058/export 2026-08-11T10:56:43.179988+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e8ca30cb-9993-4d24-83e2-99f4be06d058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64638", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msqijaucbv2p", "content": "~Checkpoint~\nReport covers North Carolina Ports cyberattack, WordPress XSS2Shell RCE flaw, and Shai-Hulud npm supply-chain campaign.\n-\nIOCs: CVE-2026-64638, keyv, WEL1DROPPER\n-\n#SupplyChain #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-10T16:12:21.746469Z"} 2026-08-10T16:12:21.746469+00:00