https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 01 Jul 2026 21:05:21 +0000 https://vulnerability.circl.lu/sighting/22a93a00-c148-491e-aa95-ef55516107aa/export {"uuid": "22a93a00-c148-491e-aa95-ef55516107aa", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5757d14e-556b-4263-bd50-84cc2929bc7f", "content": "", "creation_timestamp": "2026-06-30T11:54:41.680893Z"} {"uuid": "22a93a00-c148-491e-aa95-ef55516107aa", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5757d14e-556b-4263-bd50-84cc2929bc7f", "content": "", "creation_timestamp": "2026-06-30T11:54:41.680893Z"} https://vulnerability.circl.lu/sighting/22a93a00-c148-491e-aa95-ef55516107aa/export Tue, 30 Jun 2026 11:54:41 +0000 https://vulnerability.circl.lu/sighting/7068b206-beb9-463f-ae8f-4d38c3b95eca/export {"uuid": "7068b206-beb9-463f-ae8f-4d38c3b95eca", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f95d5f58-01e6-4068-8315-1e5bc32a0fd2", "content": "", "creation_timestamp": "2026-06-23T14:06:09.139191Z"} {"uuid": "7068b206-beb9-463f-ae8f-4d38c3b95eca", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f95d5f58-01e6-4068-8315-1e5bc32a0fd2", "content": "", "creation_timestamp": "2026-06-23T14:06:09.139191Z"} https://vulnerability.circl.lu/sighting/7068b206-beb9-463f-ae8f-4d38c3b95eca/export Tue, 23 Jun 2026 14:06:09 +0000 https://vulnerability.circl.lu/sighting/064887bd-e4df-4959-95bb-d34457c2f54a/export {"uuid": "064887bd-e4df-4959-95bb-d34457c2f54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"} {"uuid": "064887bd-e4df-4959-95bb-d34457c2f54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"} https://vulnerability.circl.lu/sighting/064887bd-e4df-4959-95bb-d34457c2f54a/export Mon, 17 Mar 2025 00:00:00 +0000 https://vulnerability.circl.lu/sighting/b325de5c-ccd4-4217-b59a-85f4c4f13e6a/export {"uuid": "b325de5c-ccd4-4217-b59a-85f4c4f13e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqzbx425", "content": "", "creation_timestamp": "2025-02-19T21:02:37.895931Z"} {"uuid": "b325de5c-ccd4-4217-b59a-85f4c4f13e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqzbx425", "content": "", "creation_timestamp": "2025-02-19T21:02:37.895931Z"} https://vulnerability.circl.lu/sighting/b325de5c-ccd4-4217-b59a-85f4c4f13e6a/export Wed, 19 Feb 2025 21:02:37 +0000 https://vulnerability.circl.lu/sighting/2e1645b3-7d5d-4256-9733-14ab88eb0f8d/export {"uuid": "2e1645b3-7d5d-4256-9733-14ab88eb0f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/suboxone_chatroom/1577", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2025-01-27T07:07:44.000000Z"} {"uuid": "2e1645b3-7d5d-4256-9733-14ab88eb0f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/suboxone_chatroom/1577", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2025-01-27T07:07:44.000000Z"} https://vulnerability.circl.lu/sighting/2e1645b3-7d5d-4256-9733-14ab88eb0f8d/export Mon, 27 Jan 2025 07:07:44 +0000 https://vulnerability.circl.lu/sighting/27f66dc7-18df-4713-acdf-8ac74ea84522/export {"uuid": "27f66dc7-18df-4713-acdf-8ac74ea84522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://t.me/cvedetector/15691", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-12203 - \"WordPress RSS Icon Widget Stored Cross-Site Scripting Vulnerability\"\", \n \"Content\": \"CVE ID : CVE-2024-12203 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"17 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:16:02.000000Z"} {"uuid": "27f66dc7-18df-4713-acdf-8ac74ea84522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://t.me/cvedetector/15691", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-12203 - \"WordPress RSS Icon Widget Stored Cross-Site Scripting Vulnerability\"\", \n \"Content\": \"CVE ID : CVE-2024-12203 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"17 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:16:02.000000Z"} https://vulnerability.circl.lu/sighting/27f66dc7-18df-4713-acdf-8ac74ea84522/export Fri, 17 Jan 2025 09:16:02 +0000 https://vulnerability.circl.lu/sighting/498b53e1-f57e-4812-b86c-4957bdfea131/export {"uuid": "498b53e1-f57e-4812-b86c-4957bdfea131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12203\n\ud83d\udd39 Description: The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-17T07:01:29.571Z\n\ud83d\udccf Modified: 2025-01-17T07:01:29.571Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fbd8fec7-c95a-4c03-ac0d-894a54906863?source=cve\n2. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L83\n3. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L195", "creation_timestamp": "2025-01-17T07:56:35.000000Z"} {"uuid": "498b53e1-f57e-4812-b86c-4957bdfea131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12203\n\ud83d\udd39 Description: The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-17T07:01:29.571Z\n\ud83d\udccf Modified: 2025-01-17T07:01:29.571Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fbd8fec7-c95a-4c03-ac0d-894a54906863?source=cve\n2. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L83\n3. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L195", "creation_timestamp": "2025-01-17T07:56:35.000000Z"} https://vulnerability.circl.lu/sighting/498b53e1-f57e-4812-b86c-4957bdfea131/export Fri, 17 Jan 2025 07:56:35 +0000 https://vulnerability.circl.lu/sighting/f01d54e8-1688-46f5-b3a0-9f84cb5b852a/export {"uuid": "f01d54e8-1688-46f5-b3a0-9f84cb5b852a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dmrth2e", "content": "", "creation_timestamp": "2025-01-17T07:38:55.781464Z"} {"uuid": "f01d54e8-1688-46f5-b3a0-9f84cb5b852a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dmrth2e", "content": "", "creation_timestamp": "2025-01-17T07:38:55.781464Z"} https://vulnerability.circl.lu/sighting/f01d54e8-1688-46f5-b3a0-9f84cb5b852a/export Fri, 17 Jan 2025 07:38:55 +0000 https://vulnerability.circl.lu/sighting/de6826cb-b0df-486b-bca1-83168930f01d/export {"uuid": "de6826cb-b0df-486b-bca1-83168930f01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwaqy4j4e2b", "content": "", "creation_timestamp": "2025-01-17T07:15:46.381671Z"} {"uuid": "de6826cb-b0df-486b-bca1-83168930f01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwaqy4j4e2b", "content": "", "creation_timestamp": "2025-01-17T07:15:46.381671Z"} https://vulnerability.circl.lu/sighting/de6826cb-b0df-486b-bca1-83168930f01d/export Fri, 17 Jan 2025 07:15:46 +0000 https://vulnerability.circl.lu/sighting/e81772fe-f7a6-4bb4-b1f9-c34300051047/export {"uuid": "e81772fe-f7a6-4bb4-b1f9-c34300051047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412560283053", "content": "", "creation_timestamp": "2025-01-17T07:02:40.154540Z"} {"uuid": "e81772fe-f7a6-4bb4-b1f9-c34300051047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412560283053", "content": "", "creation_timestamp": "2025-01-17T07:02:40.154540Z"} https://vulnerability.circl.lu/sighting/e81772fe-f7a6-4bb4-b1f9-c34300051047/export Fri, 17 Jan 2025 07:02:40 +0000