<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 09 May 2026 03:48:45 +0000</lastBuildDate>
    <item>
      <title>d942fce4-8749-4375-893d-d3eba9da0146</title>
      <link>https://vulnerability.circl.lu/sighting/d942fce4-8749-4375-893d-d3eba9da0146/export</link>
      <description>{"uuid": "d942fce4-8749-4375-893d-d3eba9da0146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4937", "type": "seen", "source": "https://t.me/cibsecurity/72646", "content": "\u203c CVE-2023-4937 \u203c\n\nThe BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobe_bulkoperations_apply_default_combination function. This makes it possible for unauthenticated attackers to manipulate products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T12:35:02.000000Z"}</description>
      <content:encoded>{"uuid": "d942fce4-8749-4375-893d-d3eba9da0146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4937", "type": "seen", "source": "https://t.me/cibsecurity/72646", "content": "\u203c CVE-2023-4937 \u203c\n\nThe BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobe_bulkoperations_apply_default_combination function. This makes it possible for unauthenticated attackers to manipulate products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-20T12:35:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d942fce4-8749-4375-893d-d3eba9da0146/export</guid>
      <pubDate>Fri, 20 Oct 2023 12:35:02 +0000</pubDate>
    </item>
    <item>
      <title>4f01967b-744b-4216-8a6c-f20c327909a1</title>
      <link>https://vulnerability.circl.lu/sighting/4f01967b-744b-4216-8a6c-f20c327909a1/export</link>
      <description>{"uuid": "4f01967b-744b-4216-8a6c-f20c327909a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49378", "type": "seen", "source": "https://t.me/ctinow/159014", "content": "https://ift.tt/45xkrhJ\nCVE-2023-49378 | JFinalCMS 5.0.0 /admin/form/save cross-site request forgery", "creation_timestamp": "2023-12-24T13:41:23.000000Z"}</description>
      <content:encoded>{"uuid": "4f01967b-744b-4216-8a6c-f20c327909a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49378", "type": "seen", "source": "https://t.me/ctinow/159014", "content": "https://ift.tt/45xkrhJ\nCVE-2023-49378 | JFinalCMS 5.0.0 /admin/form/save cross-site request forgery", "creation_timestamp": "2023-12-24T13:41:23.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4f01967b-744b-4216-8a6c-f20c327909a1/export</guid>
      <pubDate>Sun, 24 Dec 2023 13:41:23 +0000</pubDate>
    </item>
    <item>
      <title>c1b0e1ab-a821-4064-9934-70d6290a6d87</title>
      <link>https://vulnerability.circl.lu/sighting/c1b0e1ab-a821-4064-9934-70d6290a6d87/export</link>
      <description>{"uuid": "c1b0e1ab-a821-4064-9934-70d6290a6d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49379", "type": "seen", "source": "https://t.me/ctinow/159016", "content": "https://ift.tt/rFwqnYx\nCVE-2023-49379 | JFinalCMS 5.0.0 /admin/friend_link/save cross-site request forgery", "creation_timestamp": "2023-12-24T13:41:25.000000Z"}</description>
      <content:encoded>{"uuid": "c1b0e1ab-a821-4064-9934-70d6290a6d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49379", "type": "seen", "source": "https://t.me/ctinow/159016", "content": "https://ift.tt/rFwqnYx\nCVE-2023-49379 | JFinalCMS 5.0.0 /admin/friend_link/save cross-site request forgery", "creation_timestamp": "2023-12-24T13:41:25.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c1b0e1ab-a821-4064-9934-70d6290a6d87/export</guid>
      <pubDate>Sun, 24 Dec 2023 13:41:25 +0000</pubDate>
    </item>
    <item>
      <title>8de68f92-d8ce-443c-ad26-fd26babca37f</title>
      <link>https://vulnerability.circl.lu/sighting/8de68f92-d8ce-443c-ad26-fd26babca37f/export</link>
      <description>{"uuid": "8de68f92-d8ce-443c-ad26-fd26babca37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49377", "type": "seen", "source": "https://t.me/ctinow/159018", "content": "https://ift.tt/wbTpdgr\nCVE-2023-49377 | JFinalCMS 5.0.0 /admin/tag/update cross-site request forgery", "creation_timestamp": "2023-12-24T13:41:27.000000Z"}</description>
      <content:encoded>{"uuid": "8de68f92-d8ce-443c-ad26-fd26babca37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49377", "type": "seen", "source": "https://t.me/ctinow/159018", "content": "https://ift.tt/wbTpdgr\nCVE-2023-49377 | JFinalCMS 5.0.0 /admin/tag/update cross-site request forgery", "creation_timestamp": "2023-12-24T13:41:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8de68f92-d8ce-443c-ad26-fd26babca37f/export</guid>
      <pubDate>Sun, 24 Dec 2023 13:41:27 +0000</pubDate>
    </item>
    <item>
      <title>c71e75e7-fe17-4c25-91f4-6a044abcb059</title>
      <link>https://vulnerability.circl.lu/sighting/c71e75e7-fe17-4c25-91f4-6a044abcb059/export</link>
      <description>{"uuid": "c71e75e7-fe17-4c25-91f4-6a044abcb059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49375", "type": "seen", "source": "https://t.me/ctinow/159019", "content": "https://ift.tt/36hWPfB\nCVE-2023-49375 | JFinalCMS 5.0.0 update cross-site request forgery", "creation_timestamp": "2023-12-24T13:41:29.000000Z"}</description>
      <content:encoded>{"uuid": "c71e75e7-fe17-4c25-91f4-6a044abcb059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49375", "type": "seen", "source": "https://t.me/ctinow/159019", "content": "https://ift.tt/36hWPfB\nCVE-2023-49375 | JFinalCMS 5.0.0 update cross-site request forgery", "creation_timestamp": "2023-12-24T13:41:29.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c71e75e7-fe17-4c25-91f4-6a044abcb059/export</guid>
      <pubDate>Sun, 24 Dec 2023 13:41:29 +0000</pubDate>
    </item>
    <item>
      <title>ec779616-9eeb-4bcc-954b-3082a4d6884c</title>
      <link>https://vulnerability.circl.lu/sighting/ec779616-9eeb-4bcc-954b-3082a4d6884c/export</link>
      <description>{"uuid": "ec779616-9eeb-4bcc-954b-3082a4d6884c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49372", "type": "seen", "source": "https://t.me/ctinow/159024", "content": "https://ift.tt/SE6OhFI\nCVE-2023-49372 | JFinalCMS 5.0.0 /admin/slide/save cross-site request forgery", "creation_timestamp": "2023-12-24T14:31:38.000000Z"}</description>
      <content:encoded>{"uuid": "ec779616-9eeb-4bcc-954b-3082a4d6884c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49372", "type": "seen", "source": "https://t.me/ctinow/159024", "content": "https://ift.tt/SE6OhFI\nCVE-2023-49372 | JFinalCMS 5.0.0 /admin/slide/save cross-site request forgery", "creation_timestamp": "2023-12-24T14:31:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ec779616-9eeb-4bcc-954b-3082a4d6884c/export</guid>
      <pubDate>Sun, 24 Dec 2023 14:31:38 +0000</pubDate>
    </item>
    <item>
      <title>87c2f58a-4722-4167-9d80-4a48a43fa9ee</title>
      <link>https://vulnerability.circl.lu/sighting/87c2f58a-4722-4167-9d80-4a48a43fa9ee/export</link>
      <description>{"uuid": "87c2f58a-4722-4167-9d80-4a48a43fa9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49373", "type": "seen", "source": "https://t.me/ctinow/159025", "content": "https://ift.tt/0IwaE3M\nCVE-2023-49373 | JFinalCMS 5.0.0 /admin/slide/delete cross-site request forgery", "creation_timestamp": "2023-12-24T14:31:39.000000Z"}</description>
      <content:encoded>{"uuid": "87c2f58a-4722-4167-9d80-4a48a43fa9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49373", "type": "seen", "source": "https://t.me/ctinow/159025", "content": "https://ift.tt/0IwaE3M\nCVE-2023-49373 | JFinalCMS 5.0.0 /admin/slide/delete cross-site request forgery", "creation_timestamp": "2023-12-24T14:31:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/87c2f58a-4722-4167-9d80-4a48a43fa9ee/export</guid>
      <pubDate>Sun, 24 Dec 2023 14:31:39 +0000</pubDate>
    </item>
    <item>
      <title>60ab3f85-1528-4c01-a1d8-7ef3d049ea62</title>
      <link>https://vulnerability.circl.lu/sighting/60ab3f85-1528-4c01-a1d8-7ef3d049ea62/export</link>
      <description>{"uuid": "60ab3f85-1528-4c01-a1d8-7ef3d049ea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49374", "type": "seen", "source": "https://t.me/ctinow/159033", "content": "https://ift.tt/8lAPuTb\nCVE-2023-49374 | JFinalCMS 5.0.0 /admin/slide/update cross-site request forgery", "creation_timestamp": "2023-12-24T15:26:14.000000Z"}</description>
      <content:encoded>{"uuid": "60ab3f85-1528-4c01-a1d8-7ef3d049ea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49374", "type": "seen", "source": "https://t.me/ctinow/159033", "content": "https://ift.tt/8lAPuTb\nCVE-2023-49374 | JFinalCMS 5.0.0 /admin/slide/update cross-site request forgery", "creation_timestamp": "2023-12-24T15:26:14.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/60ab3f85-1528-4c01-a1d8-7ef3d049ea62/export</guid>
      <pubDate>Sun, 24 Dec 2023 15:26:14 +0000</pubDate>
    </item>
    <item>
      <title>9b6166ca-d8d4-490b-bac6-9a7ff7e5990c</title>
      <link>https://vulnerability.circl.lu/sighting/9b6166ca-d8d4-490b-bac6-9a7ff7e5990c/export</link>
      <description>{"uuid": "9b6166ca-d8d4-490b-bac6-9a7ff7e5990c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49376", "type": "seen", "source": "https://t.me/ctinow/159034", "content": "https://ift.tt/tCspiwY\nCVE-2023-49376 | JFinalCMS 5.0.0 /admin/tag/delete cross-site request forgery", "creation_timestamp": "2023-12-24T15:26:15.000000Z"}</description>
      <content:encoded>{"uuid": "9b6166ca-d8d4-490b-bac6-9a7ff7e5990c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49376", "type": "seen", "source": "https://t.me/ctinow/159034", "content": "https://ift.tt/tCspiwY\nCVE-2023-49376 | JFinalCMS 5.0.0 /admin/tag/delete cross-site request forgery", "creation_timestamp": "2023-12-24T15:26:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b6166ca-d8d4-490b-bac6-9a7ff7e5990c/export</guid>
      <pubDate>Sun, 24 Dec 2023 15:26:15 +0000</pubDate>
    </item>
    <item>
      <title>527a9e9a-0d64-4cc2-ad5f-b9d2cf38b59c</title>
      <link>https://vulnerability.circl.lu/sighting/527a9e9a-0d64-4cc2-ad5f-b9d2cf38b59c/export</link>
      <description>{"uuid": "527a9e9a-0d64-4cc2-ad5f-b9d2cf38b59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2023-49371", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lxsqigshuv25", "content": "", "creation_timestamp": "2025-09-01T23:20:09.952808Z"}</description>
      <content:encoded>{"uuid": "527a9e9a-0d64-4cc2-ad5f-b9d2cf38b59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2023-49371", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lxsqigshuv25", "content": "", "creation_timestamp": "2025-09-01T23:20:09.952808Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/527a9e9a-0d64-4cc2-ad5f-b9d2cf38b59c/export</guid>
      <pubDate>Mon, 01 Sep 2025 23:20:09 +0000</pubDate>
    </item>
  </channel>
</rss>
