<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 07:34:45 +0000</lastBuildDate>
    <item>
      <title>53e9fe98-339e-4c94-9cd8-3e09283eec5e</title>
      <link>https://vulnerability.circl.lu/sighting/53e9fe98-339e-4c94-9cd8-3e09283eec5e/export</link>
      <description>{"uuid": "53e9fe98-339e-4c94-9cd8-3e09283eec5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78288", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4o54q3j32t", "content": "CVE-2026-78288 - beautiful taxonomy filters\nThe Beautiful Taxonomy Filters plugin for WordPress, up to version 2.4.6, lets anyone send specially crafted data that can execute commands on your website's database. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T05:50:05.239440Z"}</description>
      <content:encoded>{"uuid": "53e9fe98-339e-4c94-9cd8-3e09283eec5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78288", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4o54q3j32t", "content": "CVE-2026-78288 - beautiful taxonomy filters\nThe Beautiful Taxonomy Filters plugin for WordPress, up to version 2.4.6, lets anyone send specially crafted data that can execute commands on your website's database. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T05:50:05.239440Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/53e9fe98-339e-4c94-9cd8-3e09283eec5e/export</guid>
      <pubDate>Fri, 28 Aug 2026 05:50:05 +0000</pubDate>
    </item>
    <item>
      <title>8eeb87dc-9368-4593-bafa-cdfc13422280</title>
      <link>https://vulnerability.circl.lu/sighting/8eeb87dc-9368-4593-bafa-cdfc13422280/export</link>
      <description>{"uuid": "8eeb87dc-9368-4593-bafa-cdfc13422280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4o53gbml2t", "content": "CVE-2026-78286 - geo controller\nThe Geo Controller add\u2011on for WordPress (versions up to 8.9.8) lets anyone on the internet send specially crafted data that can make the server execute whatever\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#geocontroller #infinitumform #CVE #infosec", "creation_timestamp": "2026-08-28T05:50:04.088456Z"}</description>
      <content:encoded>{"uuid": "8eeb87dc-9368-4593-bafa-cdfc13422280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4o53gbml2t", "content": "CVE-2026-78286 - geo controller\nThe Geo Controller add\u2011on for WordPress (versions up to 8.9.8) lets anyone on the internet send specially crafted data that can make the server execute whatever\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#geocontroller #infinitumform #CVE #infosec", "creation_timestamp": "2026-08-28T05:50:04.088456Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8eeb87dc-9368-4593-bafa-cdfc13422280/export</guid>
      <pubDate>Fri, 28 Aug 2026 05:50:04 +0000</pubDate>
    </item>
    <item>
      <title>10447b5f-6dea-4238-98ff-8d56bfbb3393</title>
      <link>https://vulnerability.circl.lu/sighting/10447b5f-6dea-4238-98ff-8d56bfbb3393/export</link>
      <description>{"uuid": "10447b5f-6dea-4238-98ff-8d56bfbb3393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78288", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117167865115755363", "content": "CVE-2026-78288 - Critical Unauthenticated SQL Injection in Beautiful Taxonomy Filters &amp;lt;= 2.4.6. CVSS 9.3. Currently unpatched. Mitigate immediately! #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-78288/", "creation_timestamp": "2026-08-27T14:08:59.771047Z"}</description>
      <content:encoded>{"uuid": "10447b5f-6dea-4238-98ff-8d56bfbb3393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78288", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117167865115755363", "content": "CVE-2026-78288 - Critical Unauthenticated SQL Injection in Beautiful Taxonomy Filters &amp;lt;= 2.4.6. CVSS 9.3. Currently unpatched. Mitigate immediately! #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-78288/", "creation_timestamp": "2026-08-27T14:08:59.771047Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/10447b5f-6dea-4238-98ff-8d56bfbb3393/export</guid>
      <pubDate>Thu, 27 Aug 2026 14:08:59 +0000</pubDate>
    </item>
    <item>
      <title>93f89e3d-1291-4a75-9cb4-94bcf36a0235</title>
      <link>https://vulnerability.circl.lu/sighting/93f89e3d-1291-4a75-9cb4-94bcf36a0235/export</link>
      <description>{"uuid": "93f89e3d-1291-4a75-9cb4-94bcf36a0235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78288", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu2zkc7ivo2i", "content": "CVE-2026-78288 - Critical Unauthenticated SQL Injection in Beautiful Taxonomy Filters &amp;lt;= 2.4.6. CVSS 9.3. Currently unpatched. Mitigate immediately! #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-78288/", "creation_timestamp": "2026-08-27T14:08:58.986261Z"}</description>
      <content:encoded>{"uuid": "93f89e3d-1291-4a75-9cb4-94bcf36a0235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78288", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu2zkc7ivo2i", "content": "CVE-2026-78288 - Critical Unauthenticated SQL Injection in Beautiful Taxonomy Filters &amp;lt;= 2.4.6. CVSS 9.3. Currently unpatched. Mitigate immediately! #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-78288/", "creation_timestamp": "2026-08-27T14:08:58.986261Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/93f89e3d-1291-4a75-9cb4-94bcf36a0235/export</guid>
      <pubDate>Thu, 27 Aug 2026 14:08:58 +0000</pubDate>
    </item>
    <item>
      <title>3dcfd33b-7da3-4f6d-88ed-4478a9c6e580</title>
      <link>https://vulnerability.circl.lu/sighting/3dcfd33b-7da3-4f6d-88ed-4478a9c6e580/export</link>
      <description>{"uuid": "3dcfd33b-7da3-4f6d-88ed-4478a9c6e580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2vt4j7rp2r", "content": "\ud83d\udd34 CVE-2026-78286 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Geo Controller &amp;lt;= 8.9.8 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78286/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T13:02:20.679993Z"}</description>
      <content:encoded>{"uuid": "3dcfd33b-7da3-4f6d-88ed-4478a9c6e580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2vt4j7rp2r", "content": "\ud83d\udd34 CVE-2026-78286 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Geo Controller &amp;lt;= 8.9.8 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78286/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T13:02:20.679993Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3dcfd33b-7da3-4f6d-88ed-4478a9c6e580/export</guid>
      <pubDate>Thu, 27 Aug 2026 13:02:20 +0000</pubDate>
    </item>
    <item>
      <title>519e7780-2baf-4ef8-9e5e-3caf4a82cb14</title>
      <link>https://vulnerability.circl.lu/sighting/519e7780-2baf-4ef8-9e5e-3caf4a82cb14/export</link>
      <description>{"uuid": "519e7780-2baf-4ef8-9e5e-3caf4a82cb14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78285", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2vsvpz6i2t", "content": "\ud83d\udfe0 CVE-2026-78285 - High (8.5)\n\nSubscriber SQL Injection in Like Button Rating &amp;lt;= 2.6.61 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78285/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T13:02:13.742169Z"}</description>
      <content:encoded>{"uuid": "519e7780-2baf-4ef8-9e5e-3caf4a82cb14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78285", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2vsvpz6i2t", "content": "\ud83d\udfe0 CVE-2026-78285 - High (8.5)\n\nSubscriber SQL Injection in Like Button Rating &amp;lt;= 2.6.61 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78285/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T13:02:13.742169Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/519e7780-2baf-4ef8-9e5e-3caf4a82cb14/export</guid>
      <pubDate>Thu, 27 Aug 2026 13:02:13 +0000</pubDate>
    </item>
    <item>
      <title>ab1f8247-20f6-4de5-bc8a-c373d0398cdc</title>
      <link>https://vulnerability.circl.lu/sighting/ab1f8247-20f6-4de5-bc8a-c373d0398cdc/export</link>
      <description>{"uuid": "ab1f8247-20f6-4de5-bc8a-c373d0398cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117167405591936091", "content": "CVE-2026-78286 - Unauthenticated PHP Object Injection in Geo Controller &amp;lt;= 8.9.8. Potential RCE. CVSS 9.8. Audit systems &amp;amp; restrict access now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-78286/", "creation_timestamp": "2026-08-27T12:12:09.794614Z"}</description>
      <content:encoded>{"uuid": "ab1f8247-20f6-4de5-bc8a-c373d0398cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117167405591936091", "content": "CVE-2026-78286 - Unauthenticated PHP Object Injection in Geo Controller &amp;lt;= 8.9.8. Potential RCE. CVSS 9.8. Audit systems &amp;amp; restrict access now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-78286/", "creation_timestamp": "2026-08-27T12:12:09.794614Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ab1f8247-20f6-4de5-bc8a-c373d0398cdc/export</guid>
      <pubDate>Thu, 27 Aug 2026 12:12:09 +0000</pubDate>
    </item>
    <item>
      <title>537acd15-9cde-4146-83f3-4ed60d253b12</title>
      <link>https://vulnerability.circl.lu/sighting/537acd15-9cde-4146-83f3-4ed60d253b12/export</link>
      <description>{"uuid": "537acd15-9cde-4146-83f3-4ed60d253b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu2szcqw2h2p", "content": "CVE-2026-78286 - Unauthenticated PHP Object Injection in Geo Controller &amp;lt;= 8.9.8. Potential RCE. CVSS 9.8. Audit systems &amp;amp; restrict access now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-78286/", "creation_timestamp": "2026-08-27T12:12:09.493945Z"}</description>
      <content:encoded>{"uuid": "537acd15-9cde-4146-83f3-4ed60d253b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mu2szcqw2h2p", "content": "CVE-2026-78286 - Unauthenticated PHP Object Injection in Geo Controller &amp;lt;= 8.9.8. Potential RCE. CVSS 9.8. Audit systems &amp;amp; restrict access now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-78286/", "creation_timestamp": "2026-08-27T12:12:09.493945Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/537acd15-9cde-4146-83f3-4ed60d253b12/export</guid>
      <pubDate>Thu, 27 Aug 2026 12:12:09 +0000</pubDate>
    </item>
    <item>
      <title>ceff0310-ad86-47aa-bde8-ed0d2511ed12</title>
      <link>https://vulnerability.circl.lu/sighting/ceff0310-ad86-47aa-bde8-ed0d2511ed12/export</link>
      <description>{"uuid": "ceff0310-ad86-47aa-bde8-ed0d2511ed12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78288", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2srwsn2c2u", "content": "\ud83d\udea8 CVE-2026-78288 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Beautiful Taxonomy Filters &amp;lt;= 2.4.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78288\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:59.076426Z"}</description>
      <content:encoded>{"uuid": "ceff0310-ad86-47aa-bde8-ed0d2511ed12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78288", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2srwsn2c2u", "content": "\ud83d\udea8 CVE-2026-78288 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Beautiful Taxonomy Filters &amp;lt;= 2.4.6 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78288\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:59.076426Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ceff0310-ad86-47aa-bde8-ed0d2511ed12/export</guid>
      <pubDate>Thu, 27 Aug 2026 12:07:59 +0000</pubDate>
    </item>
    <item>
      <title>47dff433-3d7f-4ea4-99a6-b85364b55362</title>
      <link>https://vulnerability.circl.lu/sighting/47dff433-3d7f-4ea4-99a6-b85364b55362/export</link>
      <description>{"uuid": "47dff433-3d7f-4ea4-99a6-b85364b55362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2srn2bca23", "content": "\ud83d\udea8 CVE-2026-78286 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Geo Controller &amp;lt;= 8.9.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78286\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:48.946331Z"}</description>
      <content:encoded>{"uuid": "47dff433-3d7f-4ea4-99a6-b85364b55362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78286", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu2srn2bca23", "content": "\ud83d\udea8 CVE-2026-78286 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Geo Controller &amp;lt;= 8.9.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78286\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T12:07:48.946331Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/47dff433-3d7f-4ea4-99a6-b85364b55362/export</guid>
      <pubDate>Thu, 27 Aug 2026 12:07:48 +0000</pubDate>
    </item>
  </channel>
</rss>
