https://vulnerability.circl.lu/sightings/feed 2026-10-07T07:37:01.610627+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/19b77f6e-ba0b-4158-9963-84f2d332c819/export 2026-10-07T07:37:01.635598+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "19b77f6e-ba0b-4158-9963-84f2d332c819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75962", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx6qvlsjzn2x", "content": "Post SMTP WordPress plugin (<=4.0.1) hit by HIGH severity stored XSS. Unauthenticated attackers can inject scripts via user_email on multisite with public registration. Mitigate now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-75962-cwe-79-improper-neutralization-of-input-during-web-page-generatio...", "creation_timestamp": "2026-10-06T06:00:29.729521Z"} 2026-10-06T06:00:29.729521+00:00 https://vulnerability.circl.lu/sighting/09aa1f1b-fa52-4a53-af94-93b2d4dbe680/export 2026-10-07T07:37:01.639478+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "09aa1f1b-fa52-4a53-af94-93b2d4dbe680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75962", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117392436495694763", "content": "CVE-2026-75962: HIGH severity stored XSS in Post SMTP WordPress plugin (<=4.0.1). Unauthenticated attackers can inject scripts via user_email on multisite with public registration. Patch or restrict registration. https://radar.offseq.com/threat/cve-2026-75962-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-4d025f1757070abe #OffSeq #WordPress #XSS #Infosec", "creation_timestamp": "2026-10-06T06:00:26.970726Z"} 2026-10-06T06:00:26.970726+00:00