<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 24 Jun 2026 18:57:24 +0000</lastBuildDate>
    <item>
      <title>169ef415-b863-4f6e-90dd-01b7c8c27a4f</title>
      <link>https://vulnerability.circl.lu/sighting/169ef415-b863-4f6e-90dd-01b7c8c27a4f/export</link>
      <description>{"uuid": "169ef415-b863-4f6e-90dd-01b7c8c27a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13816\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Aiomatic - Automatic AI Content Writer &amp;amp; Editor, GPT-3 &amp;amp; GPT-4, ChatGPT ChatBot &amp;amp; AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete posts, list and delete batches, list assistant uploaded files, delete personas, delete forms, delete templates, and clear logs. The vulnerability was partially patched in version 2.3.5.\n\ud83d\udccf Published: 2025-03-08T08:22:56.377Z\n\ud83d\udccf Modified: 2025-03-08T08:22:56.377Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/69de7d93-b255-4d41-8680-9762ff632804?source=cve\n2. https://coderevolution.ro/knowledge-base/faq/full-changelog-aiomatic-automatic-ai-content-writer-editor-gpt-3-gpt-4-chatgpt-chatbot-ai-toolkit/#item-description__changelog", "creation_timestamp": "2025-03-08T08:37:33.000000Z"}</description>
      <content:encoded>{"uuid": "169ef415-b863-4f6e-90dd-01b7c8c27a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13816\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Aiomatic - Automatic AI Content Writer &amp;amp; Editor, GPT-3 &amp;amp; GPT-4, ChatGPT ChatBot &amp;amp; AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete posts, list and delete batches, list assistant uploaded files, delete personas, delete forms, delete templates, and clear logs. The vulnerability was partially patched in version 2.3.5.\n\ud83d\udccf Published: 2025-03-08T08:22:56.377Z\n\ud83d\udccf Modified: 2025-03-08T08:22:56.377Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/69de7d93-b255-4d41-8680-9762ff632804?source=cve\n2. https://coderevolution.ro/knowledge-base/faq/full-changelog-aiomatic-automatic-ai-content-writer-editor-gpt-3-gpt-4-chatgpt-chatbot-ai-toolkit/#item-description__changelog", "creation_timestamp": "2025-03-08T08:37:33.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/169ef415-b863-4f6e-90dd-01b7c8c27a4f/export</guid>
      <pubDate>Sat, 08 Mar 2025 08:37:33 +0000</pubDate>
    </item>
    <item>
      <title>06c43258-43ee-4ad2-8dbe-d965803a89be</title>
      <link>https://vulnerability.circl.lu/sighting/06c43258-43ee-4ad2-8dbe-d965803a89be/export</link>
      <description>{"uuid": "06c43258-43ee-4ad2-8dbe-d965803a89be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://t.me/cvedetector/19888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13816 - Aiomatic WordPress Unauthenticated Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13816 \nPublished : March 8, 2025, 9:15 a.m. | 37\u00a0minutes ago \nDescription : The Aiomatic - Automatic AI Content Writer &amp;amp; Editor, GPT-3 &amp;amp; GPT-4, ChatGPT ChatBot &amp;amp; AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete posts, list and delete batches, list assistant uploaded files, delete personas, delete forms, delete templates, and clear logs. The vulnerability was partially patched in version 2.3.5. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T11:00:22.000000Z"}</description>
      <content:encoded>{"uuid": "06c43258-43ee-4ad2-8dbe-d965803a89be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://t.me/cvedetector/19888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13816 - Aiomatic WordPress Unauthenticated Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-13816 \nPublished : March 8, 2025, 9:15 a.m. | 37\u00a0minutes ago \nDescription : The Aiomatic - Automatic AI Content Writer &amp;amp; Editor, GPT-3 &amp;amp; GPT-4, ChatGPT ChatBot &amp;amp; AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete posts, list and delete batches, list assistant uploaded files, delete personas, delete forms, delete templates, and clear logs. The vulnerability was partially patched in version 2.3.5. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T11:00:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/06c43258-43ee-4ad2-8dbe-d965803a89be/export</guid>
      <pubDate>Sat, 08 Mar 2025 11:00:22 +0000</pubDate>
    </item>
    <item>
      <title>ad44ee6a-18c5-4e0d-9680-fd9d3730b7d5</title>
      <link>https://vulnerability.circl.lu/sighting/ad44ee6a-18c5-4e0d-9680-fd9d3730b7d5/export</link>
      <description>{"uuid": "ad44ee6a-18c5-4e0d-9680-fd9d3730b7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljujwnrqvg26", "content": "", "creation_timestamp": "2025-03-08T12:35:27.429788Z"}</description>
      <content:encoded>{"uuid": "ad44ee6a-18c5-4e0d-9680-fd9d3730b7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljujwnrqvg26", "content": "", "creation_timestamp": "2025-03-08T12:35:27.429788Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ad44ee6a-18c5-4e0d-9680-fd9d3730b7d5/export</guid>
      <pubDate>Sat, 08 Mar 2025 12:35:27 +0000</pubDate>
    </item>
    <item>
      <title>c2115e36-0fc7-4d4b-8abd-3d261d871bee</title>
      <link>https://vulnerability.circl.lu/sighting/c2115e36-0fc7-4d4b-8abd-3d261d871bee/export</link>
      <description>{"uuid": "c2115e36-0fc7-4d4b-8abd-3d261d871bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "Telegram/WkUeB9ikwxXASTyJUbHX1-4BJwrx32uR1c9bJHQgVanSYA1C", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}</description>
      <content:encoded>{"uuid": "c2115e36-0fc7-4d4b-8abd-3d261d871bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-13816", "type": "seen", "source": "Telegram/WkUeB9ikwxXASTyJUbHX1-4BJwrx32uR1c9bJHQgVanSYA1C", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c2115e36-0fc7-4d4b-8abd-3d261d871bee/export</guid>
      <pubDate>Sat, 08 Mar 2025 16:29:00 +0000</pubDate>
    </item>
  </channel>
</rss>
