https://vulnerability.circl.lu/sightings/feed 2026-09-02T21:55:02.368370+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c965d505-1806-4a01-ab78-48fdb3b6950c/export 2026-09-02T21:55:02.396517+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c965d505-1806-4a01-ab78-48fdb3b6950c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "Telegram/5kO5Q2wTOurnBwc-YFHOCZwVFJew3TejlXiqZK_FHnxdywk", "content": "", "creation_timestamp": "2026-09-02T01:00:18.688542Z"} 2026-09-02T01:00:18.688542+00:00 https://vulnerability.circl.lu/sighting/510388d2-c547-4869-9845-b369afc9cc95/export 2026-09-02T21:55:02.398442+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "510388d2-c547-4869-9845-b369afc9cc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "Telegram/U-Lw1mLsBIRfCm1Ollw0n6rUh-gbSxMVEkANJuForVtnctY", "content": "", "creation_timestamp": "2026-09-02T01:00:08.658884Z"} 2026-09-02T01:00:08.658884+00:00 https://vulnerability.circl.lu/sighting/a4137d54-aabc-4e23-99ab-75961fad30f4/export 2026-09-02T21:55:02.398585+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a4137d54-aabc-4e23-99ab-75961fad30f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82222\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0x19\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-31 09:38:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGiveWP <= 4.16.7.1 Unauthenticated PHP Object Injection \u2192 RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T00:00:09.779575Z"} 2026-09-01T00:00:09.779575+00:00 https://vulnerability.circl.lu/sighting/07596937-bc4a-4d9b-8d04-34742e8242e4/export 2026-09-02T21:55:02.398708+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "07596937-bc4a-4d9b-8d04-34742e8242e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/pphm_HackerNews/2935", "content": "\ud83d\udd34 Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers\n\nA critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain.\n\nA critical vulnerability in GiveWP, one of the most widely used WordPress plugins for online donations and fundraising, can let an unauthenticated attacker execute commands on the server. Patchstack disclosed the flaw on August 28, after researcher Udin Chan reported it on July 28, and GiveWP fixed it in version 4.16.7.2 released on August 27.\n\nThe issue, tracked as CVE-2026-82222 (CVSS score of 10.0), affects GiveWP versions through 4.16.7.1. An attacker doesn\u2019t need an account or user interaction to exploit the underlying vulnerability.", "creation_timestamp": "2026-09-01T00:00:09.380779Z"} 2026-09-01T00:00:09.380779+00:00 https://vulnerability.circl.lu/sighting/f1aaf860-01c8-4e00-88a9-69fd4a1a928e/export 2026-09-02T21:55:02.398815+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f1aaf860-01c8-4e00-88a9-69fd4a1a928e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "Telegram/9Yoqh7sH3hpcZGym1s5AOL0SDgosbZzJ3I3cv0NpjiXxckZ0", "content": "", "creation_timestamp": "2026-09-01T00:00:09.206936Z"} 2026-09-01T00:00:09.206936+00:00 https://vulnerability.circl.lu/sighting/de182cc1-903c-41a5-a196-9a421b5f07cf/export 2026-09-02T21:55:02.398916+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "de182cc1-903c-41a5-a196-9a421b5f07cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "Telegram/9Yoqh7sH3hpcZGym1s5AOL0SDgosbZzJ3I3cv0NpjiXxckZ0", "content": "", "creation_timestamp": "2026-08-31T19:00:05.222655Z"} 2026-08-31T19:00:05.222655+00:00 https://vulnerability.circl.lu/sighting/597adeed-dd10-4bca-9a83-454eeca2d703/export 2026-09-02T21:55:02.399016+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "597adeed-dd10-4bca-9a83-454eeca2d703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/pphm_HackerNews/2935", "content": "\ud83d\udd34 Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers\n\nA critical GiveWP flaw lets unauthenticated attackers execute server commands. Version 4.16.7.2 fixes the PHP object injection chain.\n\nA critical vulnerability in GiveWP, one of the most widely used WordPress plugins for online donations and fundraising, can let an unauthenticated attacker execute commands on the server. Patchstack disclosed the flaw on August 28, after researcher Udin Chan reported it on July 28, and GiveWP fixed it in version 4.16.7.2 released on August 27.\n\nThe issue, tracked as CVE-2026-82222 (CVSS score of 10.0), affects GiveWP versions through 4.16.7.1. An attacker doesn\u2019t need an account or user interaction to exploit the underlying vulnerability.", "creation_timestamp": "2026-08-31T16:00:05.484154Z"} 2026-08-31T16:00:05.484154+00:00 https://vulnerability.circl.lu/sighting/e853885e-2b55-4f1c-8b1f-7eff29a43b06/export 2026-09-02T21:55:02.399121+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e853885e-2b55-4f1c-8b1f-7eff29a43b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82222\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0x19\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-31 09:38:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGiveWP <= 4.16.7.1 Unauthenticated PHP Object Injection \u2192 RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T15:00:04.341253Z"} 2026-08-31T15:00:04.341253+00:00 https://vulnerability.circl.lu/sighting/46f4bee6-1914-4d35-99a5-3ca0bf142ae1/export 2026-09-02T21:55:02.399222+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "46f4bee6-1914-4d35-99a5-3ca0bf142ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mue52rmhdw2x", "content": "Daily IT Security Digest \u2014 2026-08-31\nTwo critical WordPress plugin vulnerabilities were disclosed:- **GiveWP (CVE-2026-82222)**: Maximum-severity vulnerability allowing unauthenticated remote code execution. Attackers can take over WordPress sites.", "creation_timestamp": "2026-08-31T05:05:50.807308Z"} 2026-08-31T05:05:50.807308+00:00 https://vulnerability.circl.lu/sighting/4d532a10-1ab6-4414-b902-753db7b8257f/export 2026-09-02T21:55:02.399325+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4d532a10-1ab6-4414-b902-753db7b8257f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100304", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-82222-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a UdinChan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 01:54:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic PoC for CVE-2026-82222\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-31T00:00:39.879923Z"} 2026-08-31T00:00:39.879923+00:00