<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 30 Aug 2026 02:55:41 +0000</lastBuildDate>
    <item>
      <title>8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd</title>
      <link>https://vulnerability.circl.lu/sighting/8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd/export</link>
      <description>{"uuid": "8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu74dqrndj2u", "content": "\ud83e\udd16 CVE-2026-82222: RCE in the GiveWP WordPress donation plugin. Unauthenticated registration + unserialize gadget chain \u2192 arbitrary code execution. Fixed in 4.16.7.2.\nhttps://www.bleepingcomputer.com/news/security/givewp-wordpress-donation-plugin-flaw-lets-hackers-execute-server-commands/", "creation_timestamp": "2026-08-29T05:09:39.447897Z"}</description>
      <content:encoded>{"uuid": "8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu74dqrndj2u", "content": "\ud83e\udd16 CVE-2026-82222: RCE in the GiveWP WordPress donation plugin. Unauthenticated registration + unserialize gadget chain \u2192 arbitrary code execution. Fixed in 4.16.7.2.\nhttps://www.bleepingcomputer.com/news/security/givewp-wordpress-donation-plugin-flaw-lets-hackers-execute-server-commands/", "creation_timestamp": "2026-08-29T05:09:39.447897Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8bcdcc6d-ecac-44e2-8ad2-00c0dfd716bd/export</guid>
      <pubDate>Sat, 29 Aug 2026 05:09:39 +0000</pubDate>
    </item>
    <item>
      <title>ab0fec19-fce8-422b-93b6-81a61198f252</title>
      <link>https://vulnerability.circl.lu/sighting/ab0fec19-fce8-422b-93b6-81a61198f252/export</link>
      <description>{"uuid": "ab0fec19-fce8-422b-93b6-81a61198f252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu72ott44y2f", "content": "CVE-2026-82222 - givewp\nThe GiveWP donation plugin for WordPress can be fooled by specially crafted information, allowing an attacker to insert malicious instructions that run on your site. This could give them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#givewp #CVE #infosec", "creation_timestamp": "2026-08-29T04:40:04.447533Z"}</description>
      <content:encoded>{"uuid": "ab0fec19-fce8-422b-93b6-81a61198f252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu72ott44y2f", "content": "CVE-2026-82222 - givewp\nThe GiveWP donation plugin for WordPress can be fooled by specially crafted information, allowing an attacker to insert malicious instructions that run on your site. This could give them\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#givewp #CVE #infosec", "creation_timestamp": "2026-08-29T04:40:04.447533Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ab0fec19-fce8-422b-93b6-81a61198f252/export</guid>
      <pubDate>Sat, 29 Aug 2026 04:40:04 +0000</pubDate>
    </item>
    <item>
      <title>f93647f6-874e-4e07-acf7-e90351568f59</title>
      <link>https://vulnerability.circl.lu/sighting/f93647f6-874e-4e07-acf7-e90351568f59/export</link>
      <description>{"uuid": "f93647f6-874e-4e07-acf7-e90351568f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3mu6uv3gyfa2f", "content": "GiveWP CVE-2026-82222: RCE Chain from Unauthenticated Registration to PHP Object Injection https://cstu.io/36a669 #tecnologia #python #google", "creation_timestamp": "2026-08-29T02:56:11.806762Z"}</description>
      <content:encoded>{"uuid": "f93647f6-874e-4e07-acf7-e90351568f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3mu6uv3gyfa2f", "content": "GiveWP CVE-2026-82222: RCE Chain from Unauthenticated Registration to PHP Object Injection https://cstu.io/36a669 #tecnologia #python #google", "creation_timestamp": "2026-08-29T02:56:11.806762Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f93647f6-874e-4e07-acf7-e90351568f59/export</guid>
      <pubDate>Sat, 29 Aug 2026 02:56:11 +0000</pubDate>
    </item>
    <item>
      <title>b2284380-2d4a-44b0-b8ff-bae4b4933f33</title>
      <link>https://vulnerability.circl.lu/sighting/b2284380-2d4a-44b0-b8ff-bae4b4933f33/export</link>
      <description>{"uuid": "b2284380-2d4a-44b0-b8ff-bae4b4933f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/captainsmok3r_official/506", "content": "GiveWP WordPress donation plugin has a CVSS 10 RCE flaw. CVE-2026-82222: unauthenticated PHP object injection via deserialization. Affects &amp;lt;= 4.16.7.1", "creation_timestamp": "2026-08-29T00:00:07.107418Z"}</description>
      <content:encoded>{"uuid": "b2284380-2d4a-44b0-b8ff-bae4b4933f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://t.me/captainsmok3r_official/506", "content": "GiveWP WordPress donation plugin has a CVSS 10 RCE flaw. CVE-2026-82222: unauthenticated PHP object injection via deserialization. Affects &amp;lt;= 4.16.7.1", "creation_timestamp": "2026-08-29T00:00:07.107418Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b2284380-2d4a-44b0-b8ff-bae4b4933f33/export</guid>
      <pubDate>Sat, 29 Aug 2026 00:00:07 +0000</pubDate>
    </item>
    <item>
      <title>a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4</title>
      <link>https://vulnerability.circl.lu/sighting/a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4/export</link>
      <description>{"uuid": "a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu5jwrpbtc24", "content": "\ud83d\udea8 CVE-2026-82222 \u2014 CVSS 10 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. T...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82222\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T14:07:37.838960Z"}</description>
      <content:encoded>{"uuid": "a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82222", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu5jwrpbtc24", "content": "\ud83d\udea8 CVE-2026-82222 \u2014 CVSS 10 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. T...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82222\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T14:07:37.838960Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a4b2ebe9-5cda-46bf-9c2c-660f6ef9d3d4/export</guid>
      <pubDate>Fri, 28 Aug 2026 14:07:37 +0000</pubDate>
    </item>
  </channel>
</rss>
