https://vulnerability.circl.lu/sightings/feed 2026-09-29T21:29:03.636152+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/be83fce5-dd03-4b02-b170-4ac7ab6785a6/export 2026-09-29T21:29:03.667653+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "be83fce5-dd03-4b02-b170-4ac7ab6785a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117349299413510599", "content": "CVE-2026-94504: Ninja Forms 3.15.3 stored XSS, CVSS 7.2. Attacker script runs in WordPress admin origin. No patch yet - restrict submission access and watch vendor advisories. https://www.valtersit.com/cve/CVE-2026-94504/ #CVE #infosec #WordPress", "creation_timestamp": "2026-09-28T15:10:21.700819Z"} 2026-09-28T15:10:21.700819+00:00 https://vulnerability.circl.lu/sighting/f6b3fc8a-57b9-48ef-b01e-e2d23814b6ba/export 2026-09-29T21:29:03.671463+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f6b3fc8a-57b9-48ef-b01e-e2d23814b6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwlle6zoxd2g", "content": "CVE-2026-94504: Ninja Forms 3.15.3 stored XSS, CVSS 7.2. Attacker script runs in WordPress admin origin. No patch yet - restrict submission access and watch vendor advisories. https://www.valtersit.com/cve/CVE-2026-94504/ #CVE #infosec #WordPress", "creation_timestamp": "2026-09-28T15:00:41.680507Z"} 2026-09-28T15:00:41.680507+00:00 https://vulnerability.circl.lu/sighting/86755cbe-a830-43be-94f2-d729322734fb/export 2026-09-29T21:29:03.671717+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "86755cbe-a830-43be-94f2-d729322734fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "Telegram/cjlcZTFFUyGrwljsqQ_tJDhKhIyBt5_Ycl19FfJ_ZRz-oCM", "content": "", "creation_timestamp": "2026-09-24T09:00:04.000000Z"} 2026-09-24T09:00:04+00:00 https://vulnerability.circl.lu/sighting/8d2968b4-573a-4fd2-9673-0164e2e87bdb/export 2026-09-29T21:29:03.671830+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8d2968b4-573a-4fd2-9673-0164e2e87bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "published-proof-of-concept", "source": "Telegram/cjlcZTFFUyGrwljsqQ_tJDhKhIyBt5_Ycl19FfJ_ZRz-oCM", "content": "", "creation_timestamp": "2026-09-24T09:00:04.000000Z"} 2026-09-24T09:00:04+00:00 https://vulnerability.circl.lu/sighting/a3f51bdc-ca1a-492a-be4d-3a9b4628d37c/export 2026-09-29T21:29:03.671931+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a3f51bdc-ca1a-492a-be4d-3a9b4628d37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://t.me/GithubRedTeam/103183", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-94504\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 01:37:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNinja Forms unauth stored XSS POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T02:00:12.000000Z"} 2026-09-24T02:00:12+00:00 https://vulnerability.circl.lu/sighting/8b2c9e70-1a2d-4e8f-8aa7-15ef02748378/export 2026-09-29T21:29:03.672032+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8b2c9e70-1a2d-4e8f-8aa7-15ef02748378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103183", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-94504\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 01:37:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNinja Forms unauth stored XSS POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T02:00:12.000000Z"} 2026-09-24T02:00:12+00:00 https://vulnerability.circl.lu/sighting/d5ee0b6c-fc86-4ac0-b71e-a9d110b5fd3d/export 2026-09-29T21:29:03.672132+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d5ee0b6c-fc86-4ac0-b71e-a9d110b5fd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bv3gfivokqwwm", "content": "CVE-2026-94504 - Ninja Forms \u2013 The Contact Form Builder That Grows With You\nCVE ID : CVE-2026-94504\n \n Published : Sept. 22, 2026, 6:39 a.m. | 39\u00a0minutes ago\n \n Description : Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encodin...", "creation_timestamp": "2026-09-22T07:44:46.508949Z"} 2026-09-22T07:44:46.508949+00:00