https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 02 Jun 2026 03:33:05 +0000 https://vulnerability.circl.lu/sighting/b815935e-031a-4d45-9af5-b422b879bd85/export {"uuid": "b815935e-031a-4d45-9af5-b422b879bd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3849", "type": "seen", "source": "https://t.me/cibsecurity/53572", "content": "\u203c CVE-2022-3849 \u203c\n\nThe WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-28T16:28:10.000000Z"} {"uuid": "b815935e-031a-4d45-9af5-b422b879bd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3849", "type": "seen", "source": "https://t.me/cibsecurity/53572", "content": "\u203c CVE-2022-3849 \u203c\n\nThe WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-28T16:28:10.000000Z"} https://vulnerability.circl.lu/sighting/b815935e-031a-4d45-9af5-b422b879bd85/export Mon, 28 Nov 2022 16:28:10 +0000 https://vulnerability.circl.lu/sighting/d2bb84a2-04f1-457f-8cc5-8df84f9aea61/export {"uuid": "d2bb84a2-04f1-457f-8cc5-8df84f9aea61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38490", "type": "seen", "source": "https://t.me/cibsecurity/56257", "content": "\u203c CVE-2022-38490 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:28:50.000000Z"} {"uuid": "d2bb84a2-04f1-457f-8cc5-8df84f9aea61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38490", "type": "seen", "source": "https://t.me/cibsecurity/56257", "content": "\u203c CVE-2022-38490 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:28:50.000000Z"} https://vulnerability.circl.lu/sighting/d2bb84a2-04f1-457f-8cc5-8df84f9aea61/export Wed, 11 Jan 2023 00:28:50 +0000 https://vulnerability.circl.lu/sighting/f9779617-c401-4c06-8c85-b90094b53fc3/export {"uuid": "f9779617-c401-4c06-8c85-b90094b53fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38491", "type": "seen", "source": "https://t.me/cibsecurity/56264", "content": "\u203c CVE-2022-38491 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:28:58.000000Z"} {"uuid": "f9779617-c401-4c06-8c85-b90094b53fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38491", "type": "seen", "source": "https://t.me/cibsecurity/56264", "content": "\u203c CVE-2022-38491 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:28:58.000000Z"} https://vulnerability.circl.lu/sighting/f9779617-c401-4c06-8c85-b90094b53fc3/export Wed, 11 Jan 2023 00:28:58 +0000 https://vulnerability.circl.lu/sighting/0e722e4e-94cf-4c9b-a2c6-a9f6595bba6d/export {"uuid": "0e722e4e-94cf-4c9b-a2c6-a9f6595bba6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38492", "type": "seen", "source": "https://t.me/cibsecurity/56280", "content": "\u203c CVE-2022-38492 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 before 2022.1.110.1.02. One parameter allows SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:34:56.000000Z"} {"uuid": "0e722e4e-94cf-4c9b-a2c6-a9f6595bba6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38492", "type": "seen", "source": "https://t.me/cibsecurity/56280", "content": "\u203c CVE-2022-38492 \u203c\n\nAn issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 before 2022.1.110.1.02. One parameter allows SQL injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:34:56.000000Z"} https://vulnerability.circl.lu/sighting/0e722e4e-94cf-4c9b-a2c6-a9f6595bba6d/export Wed, 11 Jan 2023 00:34:56 +0000 https://vulnerability.circl.lu/sighting/fee014af-5781-43c4-8974-7ec2f347245a/export {"uuid": "fee014af-5781-43c4-8974-7ec2f347245a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3849", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3849\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin\n\ud83d\udccf Published: 2022-11-28T13:47:16.821Z\n\ud83d\udccf Modified: 2025-04-28T18:09:28.086Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/511327d3-499b-4ad9-8fd3-99f9f7deb4f5\n2. https://bulletin.iese.de/post/wp-user-merger_1-5-1_3/", "creation_timestamp": "2025-04-28T18:10:51.000000Z"} {"uuid": "fee014af-5781-43c4-8974-7ec2f347245a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3849", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3849\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin\n\ud83d\udccf Published: 2022-11-28T13:47:16.821Z\n\ud83d\udccf Modified: 2025-04-28T18:09:28.086Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/511327d3-499b-4ad9-8fd3-99f9f7deb4f5\n2. https://bulletin.iese.de/post/wp-user-merger_1-5-1_3/", "creation_timestamp": "2025-04-28T18:10:51.000000Z"} https://vulnerability.circl.lu/sighting/fee014af-5781-43c4-8974-7ec2f347245a/export Mon, 28 Apr 2025 18:10:51 +0000