<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 27 Aug 2026 07:11:24 +0000</lastBuildDate>
    <item>
      <title>dc0ec5de-1737-4d88-8a9d-3a82e220c5fb</title>
      <link>https://vulnerability.circl.lu/sighting/dc0ec5de-1737-4d88-8a9d-3a82e220c5fb/export</link>
      <description>{"uuid": "dc0ec5de-1737-4d88-8a9d-3a82e220c5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt5vuthieq2c", "content": "CVE-2026-16142 truebooker-appointment-booking (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T00:16:05.855437Z"}</description>
      <content:encoded>{"uuid": "dc0ec5de-1737-4d88-8a9d-3a82e220c5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt5vuthieq2c", "content": "CVE-2026-16142 truebooker-appointment-booking (CVSS Score 9.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T00:16:05.855437Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dc0ec5de-1737-4d88-8a9d-3a82e220c5fb/export</guid>
      <pubDate>Sun, 16 Aug 2026 00:16:05 +0000</pubDate>
    </item>
    <item>
      <title>945e1bca-a3d3-4d87-b2fe-e99c8bf7dab0</title>
      <link>https://vulnerability.circl.lu/sighting/945e1bca-a3d3-4d87-b2fe-e99c8bf7dab0/export</link>
      <description>{"uuid": "945e1bca-a3d3-4d87-b2fe-e99c8bf7dab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4itlksev23", "content": "CVE-2026-16142\nThe TrueBooker plugin for WordPress allows unauthorized users to change any account's email address. This could lead to account takeover if an attacker gains control of the email address associated with an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T10:50:05.296789Z"}</description>
      <content:encoded>{"uuid": "945e1bca-a3d3-4d87-b2fe-e99c8bf7dab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4itlksev23", "content": "CVE-2026-16142\nThe TrueBooker plugin for WordPress allows unauthorized users to change any account's email address. This could lead to account takeover if an attacker gains control of the email address associated with an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T10:50:05.296789Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/945e1bca-a3d3-4d87-b2fe-e99c8bf7dab0/export</guid>
      <pubDate>Sat, 15 Aug 2026 10:50:05 +0000</pubDate>
    </item>
    <item>
      <title>48a376a8-61f5-403c-b280-a0d5cc777dce</title>
      <link>https://vulnerability.circl.lu/sighting/48a376a8-61f5-403c-b280-a0d5cc777dce/export</link>
      <description>{"uuid": "48a376a8-61f5-403c-b280-a0d5cc777dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4g2lvjhh24", "content": "\ud83d\udd34 CVE-2026-16142 - Critical (9.8)\n\nThe TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16142/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T10:00:19.865395Z"}</description>
      <content:encoded>{"uuid": "48a376a8-61f5-403c-b280-a0d5cc777dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16142", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4g2lvjhh24", "content": "\ud83d\udd34 CVE-2026-16142 - Critical (9.8)\n\nThe TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16142/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T10:00:19.865395Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/48a376a8-61f5-403c-b280-a0d5cc777dce/export</guid>
      <pubDate>Sat, 15 Aug 2026 10:00:19 +0000</pubDate>
    </item>
    <item>
      <title>ae7b1d2b-09ab-4528-82d4-ce1c5093706a</title>
      <link>https://vulnerability.circl.lu/sighting/ae7b1d2b-09ab-4528-82d4-ce1c5093706a/export</link>
      <description>{"uuid": "ae7b1d2b-09ab-4528-82d4-ce1c5093706a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16142", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt4cpjezg72c", "content": "TrueBooker WP plugin \u22641.2.6 has a CRITICAL auth bypass (CVE-2026-16142). Attackers can hijack any user via email change &amp;amp; password reset. Disable or restrict plugin access until a fix. https://radar.offseq.com/threat/cve-2026-16142-cwe-639-authorization-bypass-through-user-controlled-key-in-theme...", "creation_timestamp": "2026-08-15T09:00:26.598958Z"}</description>
      <content:encoded>{"uuid": "ae7b1d2b-09ab-4528-82d4-ce1c5093706a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16142", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt4cpjezg72c", "content": "TrueBooker WP plugin \u22641.2.6 has a CRITICAL auth bypass (CVE-2026-16142). Attackers can hijack any user via email change &amp;amp; password reset. Disable or restrict plugin access until a fix. https://radar.offseq.com/threat/cve-2026-16142-cwe-639-authorization-bypass-through-user-controlled-key-in-theme...", "creation_timestamp": "2026-08-15T09:00:26.598958Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ae7b1d2b-09ab-4528-82d4-ce1c5093706a/export</guid>
      <pubDate>Sat, 15 Aug 2026 09:00:26 +0000</pubDate>
    </item>
    <item>
      <title>3451af9b-1de2-43fa-b8d1-f20dde6138ef</title>
      <link>https://vulnerability.circl.lu/sighting/3451af9b-1de2-43fa-b8d1-f20dde6138ef/export</link>
      <description>{"uuid": "3451af9b-1de2-43fa-b8d1-f20dde6138ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16142", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117098704007638210", "content": "CVE-2026-16142 (CRITICAL, CVSS 9.8): TrueBooker WP plugin \u22641.2.6 is vulnerable to auth bypass via user-controlled AJAX handler. Attackers can hijack any account by changing email &amp;amp; triggering password reset. Restrict or disable TrueBooker. https://radar.offseq.com/threat/cve-2026-16142-cwe-639-authorization-bypass-through-user-controlled-key-in-themetechmount-truebooker-17123cd1c5904122 #OffSeq #WordPress #CVE2026_16142", "creation_timestamp": "2026-08-15T09:00:25.933979Z"}</description>
      <content:encoded>{"uuid": "3451af9b-1de2-43fa-b8d1-f20dde6138ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16142", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117098704007638210", "content": "CVE-2026-16142 (CRITICAL, CVSS 9.8): TrueBooker WP plugin \u22641.2.6 is vulnerable to auth bypass via user-controlled AJAX handler. Attackers can hijack any account by changing email &amp;amp; triggering password reset. Restrict or disable TrueBooker. https://radar.offseq.com/threat/cve-2026-16142-cwe-639-authorization-bypass-through-user-controlled-key-in-themetechmount-truebooker-17123cd1c5904122 #OffSeq #WordPress #CVE2026_16142", "creation_timestamp": "2026-08-15T09:00:25.933979Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3451af9b-1de2-43fa-b8d1-f20dde6138ef/export</guid>
      <pubDate>Sat, 15 Aug 2026 09:00:25 +0000</pubDate>
    </item>
  </channel>
</rss>
