<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 25 Jun 2026 14:02:13 +0000</lastBuildDate>
    <item>
      <title>633f00f1-e33f-416b-bc04-389c3fd6231c</title>
      <link>https://vulnerability.circl.lu/sighting/633f00f1-e33f-416b-bc04-389c3fd6231c/export</link>
      <description>{"uuid": "633f00f1-e33f-416b-bc04-389c3fd6231c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49766", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moebgpamvg2e", "content": "CVE-2026-49766 - WordPress WP User Manager plugin\nCVE ID : CVE-2026-49766\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Subscriber Arbitrary File Deletion in WP User Manager &amp;lt;= 2.9.16 versions.\n \n Severity: 9.9 | CRITICAL\n \n Visit the link for mo...", "creation_timestamp": "2026-06-15T21:52:56.329833Z"}</description>
      <content:encoded>{"uuid": "633f00f1-e33f-416b-bc04-389c3fd6231c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49766", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moebgpamvg2e", "content": "CVE-2026-49766 - WordPress WP User Manager plugin\nCVE ID : CVE-2026-49766\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Subscriber Arbitrary File Deletion in WP User Manager &amp;lt;= 2.9.16 versions.\n \n Severity: 9.9 | CRITICAL\n \n Visit the link for mo...", "creation_timestamp": "2026-06-15T21:52:56.329833Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/633f00f1-e33f-416b-bc04-389c3fd6231c/export</guid>
      <pubDate>Mon, 15 Jun 2026 21:52:56 +0000</pubDate>
    </item>
    <item>
      <title>1564c4b8-a4b6-4f46-9032-13f37749b66a</title>
      <link>https://vulnerability.circl.lu/sighting/1564c4b8-a4b6-4f46-9032-13f37749b66a/export</link>
      <description>{"uuid": "1564c4b8-a4b6-4f46-9032-13f37749b66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49769", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3moecq7qnpw26", "content": "CVE-2026-49769 wpforo (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T22:16:09.631229Z"}</description>
      <content:encoded>{"uuid": "1564c4b8-a4b6-4f46-9032-13f37749b66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49769", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3moecq7qnpw26", "content": "CVE-2026-49769 wpforo (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T22:16:09.631229Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1564c4b8-a4b6-4f46-9032-13f37749b66a/export</guid>
      <pubDate>Mon, 15 Jun 2026 22:16:09 +0000</pubDate>
    </item>
    <item>
      <title>1b384488-7f8b-4780-98aa-b35b6cc81a4e</title>
      <link>https://vulnerability.circl.lu/sighting/1b384488-7f8b-4780-98aa-b35b6cc81a4e/export</link>
      <description>{"uuid": "1b384488-7f8b-4780-98aa-b35b6cc81a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49768", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3moeg3ilcz52k", "content": "CVE-2026-49768 happyforms (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T23:16:09.277118Z"}</description>
      <content:encoded>{"uuid": "1b384488-7f8b-4780-98aa-b35b6cc81a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49768", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3moeg3ilcz52k", "content": "CVE-2026-49768 happyforms (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T23:16:09.277118Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1b384488-7f8b-4780-98aa-b35b6cc81a4e/export</guid>
      <pubDate>Mon, 15 Jun 2026 23:16:09 +0000</pubDate>
    </item>
    <item>
      <title>e0cb29a1-6be7-4644-98ca-7957a6ddb80d</title>
      <link>https://vulnerability.circl.lu/sighting/e0cb29a1-6be7-4644-98ca-7957a6ddb80d/export</link>
      <description>{"uuid": "e0cb29a1-6be7-4644-98ca-7957a6ddb80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49763", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moesnde5qn2v", "content": "\ud83d\udd34 CVE-2026-49763 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot &amp;lt;= 1.3.7 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49763/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T03:00:53.290853Z"}</description>
      <content:encoded>{"uuid": "e0cb29a1-6be7-4644-98ca-7957a6ddb80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49763", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moesnde5qn2v", "content": "\ud83d\udd34 CVE-2026-49763 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot &amp;lt;= 1.3.7 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49763/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T03:00:53.290853Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e0cb29a1-6be7-4644-98ca-7957a6ddb80d/export</guid>
      <pubDate>Tue, 16 Jun 2026 03:00:53 +0000</pubDate>
    </item>
    <item>
      <title>9f5d0dfe-3156-4b40-a643-99b45573a64a</title>
      <link>https://vulnerability.circl.lu/sighting/9f5d0dfe-3156-4b40-a643-99b45573a64a/export</link>
      <description>{"uuid": "9f5d0dfe-3156-4b40-a643-99b45573a64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49764", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moezdwzepx2n", "content": "\ud83d\udd34 CVE-2026-49764 - Critical (9.8)\n\nUnauthenticated Broken Authentication in RegistrationMagic &amp;lt;= 6.0.8.6 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49764/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T05:00:55.312149Z"}</description>
      <content:encoded>{"uuid": "9f5d0dfe-3156-4b40-a643-99b45573a64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49764", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moezdwzepx2n", "content": "\ud83d\udd34 CVE-2026-49764 - Critical (9.8)\n\nUnauthenticated Broken Authentication in RegistrationMagic &amp;lt;= 6.0.8.6 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49764/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T05:00:55.312149Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9f5d0dfe-3156-4b40-a643-99b45573a64a/export</guid>
      <pubDate>Tue, 16 Jun 2026 05:00:55 +0000</pubDate>
    </item>
    <item>
      <title>9b8a1929-22fe-460e-9d9f-cbeb799ddb0f</title>
      <link>https://vulnerability.circl.lu/sighting/9b8a1929-22fe-460e-9d9f-cbeb799ddb0f/export</link>
      <description>{"uuid": "9b8a1929-22fe-460e-9d9f-cbeb799ddb0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49765", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moeze6ep672n", "content": "\ud83d\udd34 CVE-2026-49765 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, El...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49765/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T05:01:02.224996Z"}</description>
      <content:encoded>{"uuid": "9b8a1929-22fe-460e-9d9f-cbeb799ddb0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49765", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moeze6ep672n", "content": "\ud83d\udd34 CVE-2026-49765 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, El...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49765/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T05:01:02.224996Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b8a1929-22fe-460e-9d9f-cbeb799ddb0f/export</guid>
      <pubDate>Tue, 16 Jun 2026 05:01:02 +0000</pubDate>
    </item>
    <item>
      <title>2f83691b-cc66-4ad6-9e4a-eec598199cbd</title>
      <link>https://vulnerability.circl.lu/sighting/2f83691b-cc66-4ad6-9e4a-eec598199cbd/export</link>
      <description>{"uuid": "2f83691b-cc66-4ad6-9e4a-eec598199cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49766", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moezefpaat2i", "content": "\ud83d\udd34 CVE-2026-49766 - Critical (9.9)\n\nSubscriber Arbitrary File Deletion in WP User Manager &amp;lt;= 2.9.16 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49766/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T05:01:09.840297Z"}</description>
      <content:encoded>{"uuid": "2f83691b-cc66-4ad6-9e4a-eec598199cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49766", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moezefpaat2i", "content": "\ud83d\udd34 CVE-2026-49766 - Critical (9.9)\n\nSubscriber Arbitrary File Deletion in WP User Manager &amp;lt;= 2.9.16 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49766/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T05:01:09.840297Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2f83691b-cc66-4ad6-9e4a-eec598199cbd/export</guid>
      <pubDate>Tue, 16 Jun 2026 05:01:09 +0000</pubDate>
    </item>
    <item>
      <title>0c73898f-696c-4537-b794-b8eb407821a6</title>
      <link>https://vulnerability.circl.lu/sighting/0c73898f-696c-4537-b794-b8eb407821a6/export</link>
      <description>{"uuid": "0c73898f-696c-4537-b794-b8eb407821a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49768", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mof4op3ppr2d", "content": "\ud83d\udd34 CVE-2026-49768 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Happyforms &amp;lt;= 1.26.13 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49768/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T06:00:36.283747Z"}</description>
      <content:encoded>{"uuid": "0c73898f-696c-4537-b794-b8eb407821a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49768", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mof4op3ppr2d", "content": "\ud83d\udd34 CVE-2026-49768 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Happyforms &amp;lt;= 1.26.13 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49768/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T06:00:36.283747Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0c73898f-696c-4537-b794-b8eb407821a6/export</guid>
      <pubDate>Tue, 16 Jun 2026 06:00:36 +0000</pubDate>
    </item>
    <item>
      <title>eefecaeb-87db-46a4-a1a2-7873a0b5dee0</title>
      <link>https://vulnerability.circl.lu/sighting/eefecaeb-87db-46a4-a1a2-7873a0b5dee0/export</link>
      <description>{"uuid": "eefecaeb-87db-46a4-a1a2-7873a0b5dee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mof4ow6pyx2r", "content": "\ud83d\udd34 CVE-2026-49769 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in wpForo Forum &amp;lt;= 3.1.0 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49769/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T06:00:43.907623Z"}</description>
      <content:encoded>{"uuid": "eefecaeb-87db-46a4-a1a2-7873a0b5dee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mof4ow6pyx2r", "content": "\ud83d\udd34 CVE-2026-49769 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in wpForo Forum &amp;lt;= 3.1.0 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49769/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T06:00:43.907623Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eefecaeb-87db-46a4-a1a2-7873a0b5dee0/export</guid>
      <pubDate>Tue, 16 Jun 2026 06:00:43 +0000</pubDate>
    </item>
    <item>
      <title>8ced192f-46c4-4b19-aceb-45186c4bada4</title>
      <link>https://vulnerability.circl.lu/sighting/8ced192f-46c4-4b19-aceb-45186c4bada4/export</link>
      <description>{"uuid": "8ced192f-46c4-4b19-aceb-45186c4bada4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moijapib252z", "content": "CVE-2026-49767 - WordPress wpForo Forum plugin\nCVE ID : CVE-2026-49767\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated Broken Authentication in wpForo Forum &amp;lt;= 3.1.0 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link f...", "creation_timestamp": "2026-06-17T14:23:23.942219Z"}</description>
      <content:encoded>{"uuid": "8ced192f-46c4-4b19-aceb-45186c4bada4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moijapib252z", "content": "CVE-2026-49767 - WordPress wpForo Forum plugin\nCVE ID : CVE-2026-49767\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated Broken Authentication in wpForo Forum &amp;lt;= 3.1.0 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link f...", "creation_timestamp": "2026-06-17T14:23:23.942219Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8ced192f-46c4-4b19-aceb-45186c4bada4/export</guid>
      <pubDate>Wed, 17 Jun 2026 14:23:23 +0000</pubDate>
    </item>
  </channel>
</rss>
