<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 20 Aug 2026 23:44:46 +0000</lastBuildDate>
    <item>
      <title>2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9</title>
      <link>https://vulnerability.circl.lu/sighting/2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9/export</link>
      <description>{"uuid": "2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt3w6fnmex24", "content": "CVE-2026-12949 wishlist-member-x (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T05:16:07.270769Z"}</description>
      <content:encoded>{"uuid": "2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt3w6fnmex24", "content": "CVE-2026-12949 wishlist-member-x (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-15T05:16:07.270769Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2f15b4c6-5c84-4c2d-b332-cc6ba7533ba9/export</guid>
      <pubDate>Sat, 15 Aug 2026 05:16:07 +0000</pubDate>
    </item>
    <item>
      <title>977e3afa-2ab2-451b-ab2d-a283ce233324</title>
      <link>https://vulnerability.circl.lu/sighting/977e3afa-2ab2-451b-ab2d-a283ce233324/export</link>
      <description>{"uuid": "977e3afa-2ab2-451b-ab2d-a283ce233324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117093756935891127", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:03:25.062651Z"}</description>
      <content:encoded>{"uuid": "977e3afa-2ab2-451b-ab2d-a283ce233324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117093756935891127", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:03:25.062651Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/977e3afa-2ab2-451b-ab2d-a283ce233324/export</guid>
      <pubDate>Fri, 14 Aug 2026 12:03:25 +0000</pubDate>
    </item>
    <item>
      <title>74313d29-f5fd-4d92-b1bb-b50b9a35f764</title>
      <link>https://vulnerability.circl.lu/sighting/74313d29-f5fd-4d92-b1bb-b50b9a35f764/export</link>
      <description>{"uuid": "74313d29-f5fd-4d92-b1bb-b50b9a35f764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt24fs2nxu2p", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:02:19.079619Z"}</description>
      <content:encoded>{"uuid": "74313d29-f5fd-4d92-b1bb-b50b9a35f764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt24fs2nxu2p", "content": "CVE-2026-12949 - Critical Account Takeover in Wishlist Member WordPress plugin. Insufficient verification allows attacker to merge accounts. CVSS 9.8. Unpatched. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-12949/", "creation_timestamp": "2026-08-14T12:02:19.079619Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/74313d29-f5fd-4d92-b1bb-b50b9a35f764/export</guid>
      <pubDate>Fri, 14 Aug 2026 12:02:19 +0000</pubDate>
    </item>
    <item>
      <title>1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b</title>
      <link>https://vulnerability.circl.lu/sighting/1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b/export</link>
      <description>{"uuid": "1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszyz3h5fs24", "content": "\ud83d\udd34 CVE-2026-12949 - Critical (9.8)\n\nThe Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verif...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12949/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T11:01:30.647128Z"}</description>
      <content:encoded>{"uuid": "1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszyz3h5fs24", "content": "\ud83d\udd34 CVE-2026-12949 - Critical (9.8)\n\nThe Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verif...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12949/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T11:01:30.647128Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1c39bf2d-ac4d-4ce8-9df5-9b4fe570be6b/export</guid>
      <pubDate>Fri, 14 Aug 2026 11:01:30 +0000</pubDate>
    </item>
    <item>
      <title>0ce8d571-c4d6-4086-8208-c2c0eedad1d3</title>
      <link>https://vulnerability.circl.lu/sighting/0ce8d571-c4d6-4086-8208-c2c0eedad1d3/export</link>
      <description>{"uuid": "0ce8d571-c4d6-4086-8208-c2c0eedad1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mszi63vvkp2y", "content": "CVE-2026-12949 - wishlist member\nA security flaw in Wishlist Member plugin for WordPress versions up to 3.34.1 allows attackers to take over any WordPress account, including administrator accounts, by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wishlistmember #CVE #infosec", "creation_timestamp": "2026-08-14T06:00:04.973946Z"}</description>
      <content:encoded>{"uuid": "0ce8d571-c4d6-4086-8208-c2c0eedad1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12949", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mszi63vvkp2y", "content": "CVE-2026-12949 - wishlist member\nA security flaw in Wishlist Member plugin for WordPress versions up to 3.34.1 allows attackers to take over any WordPress account, including administrator accounts, by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wishlistmember #CVE #infosec", "creation_timestamp": "2026-08-14T06:00:04.973946Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0ce8d571-c4d6-4086-8208-c2c0eedad1d3/export</guid>
      <pubDate>Fri, 14 Aug 2026 06:00:04 +0000</pubDate>
    </item>
  </channel>
</rss>
