<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 03 Aug 2026 15:29:46 +0000</lastBuildDate>
    <item>
      <title>3ea25a8f-b4a3-4c61-9a3d-74510e32ef61</title>
      <link>https://vulnerability.circl.lu/sighting/3ea25a8f-b4a3-4c61-9a3d-74510e32ef61/export</link>
      <description>{"uuid": "3ea25a8f-b4a3-4c61-9a3d-74510e32ef61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms22pcpgwe2a", "content": "CVE-2026-15988 - CSRF in AI Engine WordPress plugin enables attacker to create admin accounts via REST auth bypass. CVSS 8.8. Unpatched - disable plugin now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-15988/", "creation_timestamp": "2026-08-01T18:06:38.142151Z"}</description>
      <content:encoded>{"uuid": "3ea25a8f-b4a3-4c61-9a3d-74510e32ef61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms22pcpgwe2a", "content": "CVE-2026-15988 - CSRF in AI Engine WordPress plugin enables attacker to create admin accounts via REST auth bypass. CVSS 8.8. Unpatched - disable plugin now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-15988/", "creation_timestamp": "2026-08-01T18:06:38.142151Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3ea25a8f-b4a3-4c61-9a3d-74510e32ef61/export</guid>
      <pubDate>Sat, 01 Aug 2026 18:06:38 +0000</pubDate>
    </item>
    <item>
      <title>7676253c-07b6-47d9-8d3c-314ee3b44970</title>
      <link>https://vulnerability.circl.lu/sighting/7676253c-07b6-47d9-8d3c-314ee3b44970/export</link>
      <description>{"uuid": "7676253c-07b6-47d9-8d3c-314ee3b44970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzxmoptvl2c", "content": "CVE-2026-15988: \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e4\u05dc\u05d0\u05d2\u05d9\u05df AI Engine \u05dc\u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1 - \u05de\u05d4 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea?\n\n\n\nhttps://khesef.xyz/posts/A79AFABF-6CEB-4093-B9DE-B64F6CD89176", "creation_timestamp": "2026-08-01T17:11:28.553457Z"}</description>
      <content:encoded>{"uuid": "7676253c-07b6-47d9-8d3c-314ee3b44970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzxmoptvl2c", "content": "CVE-2026-15988: \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e4\u05dc\u05d0\u05d2\u05d9\u05df AI Engine \u05dc\u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1 - \u05de\u05d4 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea?\n\n\n\nhttps://khesef.xyz/posts/A79AFABF-6CEB-4093-B9DE-B64F6CD89176", "creation_timestamp": "2026-08-01T17:11:28.553457Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7676253c-07b6-47d9-8d3c-314ee3b44970/export</guid>
      <pubDate>Sat, 01 Aug 2026 17:11:28 +0000</pubDate>
    </item>
    <item>
      <title>57b33cca-18cc-4ea5-bc98-933a1e7bec6c</title>
      <link>https://vulnerability.circl.lu/sighting/57b33cca-18cc-4ea5-bc98-933a1e7bec6c/export</link>
      <description>{"uuid": "57b33cca-18cc-4ea5-bc98-933a1e7bec6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxma4lnn2v", "content": "CVE-2026-15988: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 AI Engine \u0434\u043b\u044f WordPress - \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437\n\n\n\nhttps://kripta.biz/posts/A3C87B53-32E7-42A6-AC5C-5C27E38BC236", "creation_timestamp": "2026-08-01T17:11:13.746195Z"}</description>
      <content:encoded>{"uuid": "57b33cca-18cc-4ea5-bc98-933a1e7bec6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxma4lnn2v", "content": "CVE-2026-15988: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 AI Engine \u0434\u043b\u044f WordPress - \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437\n\n\n\nhttps://kripta.biz/posts/A3C87B53-32E7-42A6-AC5C-5C27E38BC236", "creation_timestamp": "2026-08-01T17:11:13.746195Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/57b33cca-18cc-4ea5-bc98-933a1e7bec6c/export</guid>
      <pubDate>Sat, 01 Aug 2026 17:11:13 +0000</pubDate>
    </item>
    <item>
      <title>5a8a4417-eac4-48cf-9f6c-2ecbb8cf40b6</title>
      <link>https://vulnerability.circl.lu/sighting/5a8a4417-eac4-48cf-9f6c-2ecbb8cf40b6/export</link>
      <description>{"uuid": "5a8a4417-eac4-48cf-9f6c-2ecbb8cf40b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzjm4yarb2z", "content": "\ud83d\udfe0 CVE-2026-15988 - High (8.8)\n\nThe AI Engine \u2013 The Chatbot, AI Framework &amp;amp; MCP for WordPress plugin for WordPress is vulnerabl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15988/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T13:00:41.342391Z"}</description>
      <content:encoded>{"uuid": "5a8a4417-eac4-48cf-9f6c-2ecbb8cf40b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzjm4yarb2z", "content": "\ud83d\udfe0 CVE-2026-15988 - High (8.8)\n\nThe AI Engine \u2013 The Chatbot, AI Framework &amp;amp; MCP for WordPress plugin for WordPress is vulnerabl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15988/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T13:00:41.342391Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5a8a4417-eac4-48cf-9f6c-2ecbb8cf40b6/export</guid>
      <pubDate>Sat, 01 Aug 2026 13:00:41 +0000</pubDate>
    </item>
    <item>
      <title>d702afaf-d775-468f-8db0-07a28ad83a10</title>
      <link>https://vulnerability.circl.lu/sighting/d702afaf-d775-468f-8db0-07a28ad83a10/export</link>
      <description>{"uuid": "d702afaf-d775-468f-8db0-07a28ad83a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2ugqtucjoanp2", "content": "CVE-2026-15988 - AI Engine\nCVE ID : CVE-2026-15988\n \n Published : Aug. 1, 2026, 8:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : The AI Engine \u2013 The Chatbot, AI Framework &amp;amp; MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all version...", "creation_timestamp": "2026-08-01T09:44:26.268769Z"}</description>
      <content:encoded>{"uuid": "d702afaf-d775-468f-8db0-07a28ad83a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2ugqtucjoanp2", "content": "CVE-2026-15988 - AI Engine\nCVE ID : CVE-2026-15988\n \n Published : Aug. 1, 2026, 8:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : The AI Engine \u2013 The Chatbot, AI Framework &amp;amp; MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all version...", "creation_timestamp": "2026-08-01T09:44:26.268769Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d702afaf-d775-468f-8db0-07a28ad83a10/export</guid>
      <pubDate>Sat, 01 Aug 2026 09:44:26 +0000</pubDate>
    </item>
    <item>
      <title>dffd3a2d-fbf0-49f2-9a2d-ed79c51fd9a1</title>
      <link>https://vulnerability.circl.lu/sighting/dffd3a2d-fbf0-49f2-9a2d-ed79c51fd9a1/export</link>
      <description>{"uuid": "dffd3a2d-fbf0-49f2-9a2d-ed79c51fd9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mryzu3tlv423", "content": "AI Engine, a WordPress plugin on 100,000+ sites, has a flaw: one link a logged-in admin clicks can create a hidden admin account for an attacker.\n\nAffects versions up to 3.6.5; no attacker login needed.\n\nFix: update to 3.6.6+. (CVE-2026-15988)", "creation_timestamp": "2026-08-01T08:18:46.001416Z"}</description>
      <content:encoded>{"uuid": "dffd3a2d-fbf0-49f2-9a2d-ed79c51fd9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mryzu3tlv423", "content": "AI Engine, a WordPress plugin on 100,000+ sites, has a flaw: one link a logged-in admin clicks can create a hidden admin account for an attacker.\n\nAffects versions up to 3.6.5; no attacker login needed.\n\nFix: update to 3.6.6+. (CVE-2026-15988)", "creation_timestamp": "2026-08-01T08:18:46.001416Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dffd3a2d-fbf0-49f2-9a2d-ed79c51fd9a1/export</guid>
      <pubDate>Sat, 01 Aug 2026 08:18:46 +0000</pubDate>
    </item>
  </channel>
</rss>
