<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 06:44:29 +0000</lastBuildDate>
    <item>
      <title>68263d8a-dd6c-492d-b958-5508d1c0e4b2</title>
      <link>https://vulnerability.circl.lu/sighting/68263d8a-dd6c-492d-b958-5508d1c0e4b2/export</link>
      <description>{"uuid": "68263d8a-dd6c-492d-b958-5508d1c0e4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuooysk27", "content": "CVE-2026-42415 - porto theme - functionality\nThe Porto theme\u2019s Functionality plugin (versions up to 3.9.3) can be accessed by anyone on the internet to insert malicious database queries. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pthemes #CVE #infosec", "creation_timestamp": "2026-10-07T21:40:05.536528Z"}</description>
      <content:encoded>{"uuid": "68263d8a-dd6c-492d-b958-5508d1c0e4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuooysk27", "content": "CVE-2026-42415 - porto theme - functionality\nThe Porto theme\u2019s Functionality plugin (versions up to 3.9.3) can be accessed by anyone on the internet to insert malicious database queries. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pthemes #CVE #infosec", "creation_timestamp": "2026-10-07T21:40:05.536528Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/68263d8a-dd6c-492d-b958-5508d1c0e4b2/export</guid>
      <pubDate>Wed, 07 Oct 2026 21:40:05 +0000</pubDate>
    </item>
    <item>
      <title>dd55d37b-d8ed-4428-a03c-e6d17f4c47c3</title>
      <link>https://vulnerability.circl.lu/sighting/dd55d37b-d8ed-4428-a03c-e6d17f4c47c3/export</link>
      <description>{"uuid": "dd55d37b-d8ed-4428-a03c-e6d17f4c47c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx77yfdbua2a", "content": "CRITICAL: Porto Theme - Functionality \u22643.9.3 vulnerable to unauthenticated SQL injection (CVE-2026-42415). Patch status unconfirmed \u2014 restrict access now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b...", "creation_timestamp": "2026-10-06T10:30:28.668949Z"}</description>
      <content:encoded>{"uuid": "dd55d37b-d8ed-4428-a03c-e6d17f4c47c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx77yfdbua2a", "content": "CRITICAL: Porto Theme - Functionality \u22643.9.3 vulnerable to unauthenticated SQL injection (CVE-2026-42415). Patch status unconfirmed \u2014 restrict access now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b...", "creation_timestamp": "2026-10-06T10:30:28.668949Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dd55d37b-d8ed-4428-a03c-e6d17f4c47c3/export</guid>
      <pubDate>Tue, 06 Oct 2026 10:30:28 +0000</pubDate>
    </item>
    <item>
      <title>5f05d20c-c0c5-4742-954a-b8b2907ac64b</title>
      <link>https://vulnerability.circl.lu/sighting/5f05d20c-c0c5-4742-954a-b8b2907ac64b/export</link>
      <description>{"uuid": "5f05d20c-c0c5-4742-954a-b8b2907ac64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393498184652638", "content": "CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality \u22643.9.3. Unauthenticated attackers can steal sensitive data. No official patch yet \u2014 restrict access ASAP. https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b18a06bf1443 #OffSeq #CVE202642415 #Infosec #WordPress #SQLInjection", "creation_timestamp": "2026-10-06T10:30:26.803951Z"}</description>
      <content:encoded>{"uuid": "5f05d20c-c0c5-4742-954a-b8b2907ac64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-42415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393498184652638", "content": "CRITICAL SQL injection (CVE-2026-42415) in p-themes Porto Theme - Functionality \u22643.9.3. Unauthenticated attackers can steal sensitive data. No official patch yet \u2014 restrict access ASAP. https://radar.offseq.com/threat/cve-2026-42415-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3eb4b18a06bf1443 #OffSeq #CVE202642415 #Infosec #WordPress #SQLInjection", "creation_timestamp": "2026-10-06T10:30:26.803951Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5f05d20c-c0c5-4742-954a-b8b2907ac64b/export</guid>
      <pubDate>Tue, 06 Oct 2026 10:30:26 +0000</pubDate>
    </item>
    <item>
      <title>0846c4fc-0376-4acf-b4e5-636def78d48c</title>
      <link>https://vulnerability.circl.lu/sighting/0846c4fc-0376-4acf-b4e5-636def78d48c/export</link>
      <description>{"uuid": "0846c4fc-0376-4acf-b4e5-636def78d48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tnht5m2o", "content": "\ud83d\udea8 CVE-2026-42415 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Porto Theme - Functionality &amp;lt;= 3.9.3 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:55.465641Z"}</description>
      <content:encoded>{"uuid": "0846c4fc-0376-4acf-b4e5-636def78d48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tnht5m2o", "content": "\ud83d\udea8 CVE-2026-42415 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Porto Theme - Functionality &amp;lt;= 3.9.3 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-42415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:55.465641Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0846c4fc-0376-4acf-b4e5-636def78d48c/export</guid>
      <pubDate>Tue, 06 Oct 2026 10:09:55 +0000</pubDate>
    </item>
  </channel>
</rss>
