<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 28 Sep 2026 04:17:37 +0000</lastBuildDate>
    <item>
      <title>12daa694-16c9-4ccc-81e1-068f3d60bf62</title>
      <link>https://vulnerability.circl.lu/sighting/12daa694-16c9-4ccc-81e1-068f3d60bf62/export</link>
      <description>{"uuid": "12daa694-16c9-4ccc-81e1-068f3d60bf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103511", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a be-keb\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 09:10:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T10:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "12daa694-16c9-4ccc-81e1-068f3d60bf62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103511", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a be-keb\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 09:10:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T10:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/12daa694-16c9-4ccc-81e1-068f3d60bf62/export</guid>
      <pubDate>Sun, 27 Sep 2026 10:00:08 +0000</pubDate>
    </item>
    <item>
      <title>8523036d-33ef-4129-b878-d516e60123c6</title>
      <link>https://vulnerability.circl.lu/sighting/8523036d-33ef-4129-b878-d516e60123c6/export</link>
      <description>{"uuid": "8523036d-33ef-4129-b878-d516e60123c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/qZC90S3reg2BYBoeaZDLMoqfl021M9e_UnMBthvWa2cdvlY", "content": "", "creation_timestamp": "2026-09-25T03:00:05.000000Z"}</description>
      <content:encoded>{"uuid": "8523036d-33ef-4129-b878-d516e60123c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/qZC90S3reg2BYBoeaZDLMoqfl021M9e_UnMBthvWa2cdvlY", "content": "", "creation_timestamp": "2026-09-25T03:00:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8523036d-33ef-4129-b878-d516e60123c6/export</guid>
      <pubDate>Fri, 25 Sep 2026 03:00:05 +0000</pubDate>
    </item>
    <item>
      <title>d3731f02-0ca6-4a36-9fdb-c5249f4d36a4</title>
      <link>https://vulnerability.circl.lu/sighting/d3731f02-0ca6-4a36-9fdb-c5249f4d36a4/export</link>
      <description>{"uuid": "d3731f02-0ca6-4a36-9fdb-c5249f4d36a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/qZC90S3reg2BYBoeaZDLMoqfl021M9e_UnMBthvWa2cdvlY", "content": "", "creation_timestamp": "2026-09-25T03:00:05.000000Z"}</description>
      <content:encoded>{"uuid": "d3731f02-0ca6-4a36-9fdb-c5249f4d36a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/qZC90S3reg2BYBoeaZDLMoqfl021M9e_UnMBthvWa2cdvlY", "content": "", "creation_timestamp": "2026-09-25T03:00:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d3731f02-0ca6-4a36-9fdb-c5249f4d36a4/export</guid>
      <pubDate>Fri, 25 Sep 2026 03:00:05 +0000</pubDate>
    </item>
    <item>
      <title>9fb8726a-f0e5-4355-a968-0e39d0ef5658</title>
      <link>https://vulnerability.circl.lu/sighting/9fb8726a-f0e5-4355-a968-0e39d0ef5658/export</link>
      <description>{"uuid": "9fb8726a-f0e5-4355-a968-0e39d0ef5658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/XmZSdpY4T0rmzyootlW7VMaseMzYz4SaH1hTXJ2jQLx35-A", "content": "", "creation_timestamp": "2026-09-24T19:00:17.000000Z"}</description>
      <content:encoded>{"uuid": "9fb8726a-f0e5-4355-a968-0e39d0ef5658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "Telegram/XmZSdpY4T0rmzyootlW7VMaseMzYz4SaH1hTXJ2jQLx35-A", "content": "", "creation_timestamp": "2026-09-24T19:00:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9fb8726a-f0e5-4355-a968-0e39d0ef5658/export</guid>
      <pubDate>Thu, 24 Sep 2026 19:00:17 +0000</pubDate>
    </item>
    <item>
      <title>735c2ae6-9944-47d4-87a6-702a08209bc7</title>
      <link>https://vulnerability.circl.lu/sighting/735c2ae6-9944-47d4-87a6-702a08209bc7/export</link>
      <description>{"uuid": "735c2ae6-9944-47d4-87a6-702a08209bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/XmZSdpY4T0rmzyootlW7VMaseMzYz4SaH1hTXJ2jQLx35-A", "content": "", "creation_timestamp": "2026-09-24T19:00:17.000000Z"}</description>
      <content:encoded>{"uuid": "735c2ae6-9944-47d4-87a6-702a08209bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "Telegram/XmZSdpY4T0rmzyootlW7VMaseMzYz4SaH1hTXJ2jQLx35-A", "content": "", "creation_timestamp": "2026-09-24T19:00:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/735c2ae6-9944-47d4-87a6-702a08209bc7/export</guid>
      <pubDate>Thu, 24 Sep 2026 19:00:17 +0000</pubDate>
    </item>
    <item>
      <title>8885e693-aa14-4516-8ba3-6560dfe2dd8b</title>
      <link>https://vulnerability.circl.lu/sighting/8885e693-aa14-4516-8ba3-6560dfe2dd8b/export</link>
      <description>{"uuid": "8885e693-aa14-4516-8ba3-6560dfe2dd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:12:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder \u226445.16.0 \u2014 unauthenticated local file inclusion via vcv-template. Educational PoC only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T19:00:06.000000Z"}</description>
      <content:encoded>{"uuid": "8885e693-aa14-4516-8ba3-6560dfe2dd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:12:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder \u226445.16.0 \u2014 unauthenticated local file inclusion via vcv-template. Educational PoC only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T19:00:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8885e693-aa14-4516-8ba3-6560dfe2dd8b/export</guid>
      <pubDate>Thu, 24 Sep 2026 19:00:06 +0000</pubDate>
    </item>
    <item>
      <title>045afa6e-e699-497e-bbdc-9aa55ec27daf</title>
      <link>https://vulnerability.circl.lu/sighting/045afa6e-e699-497e-bbdc-9aa55ec27daf/export</link>
      <description>{"uuid": "045afa6e-e699-497e-bbdc-9aa55ec27daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:12:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder \u226445.16.0 \u2014 unauthenticated local file inclusion via vcv-template. Educational PoC only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T19:00:06.000000Z"}</description>
      <content:encoded>{"uuid": "045afa6e-e699-497e-bbdc-9aa55ec27daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:12:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 (CVSS 9.8): WordPress Visual Composer Website Builder \u226445.16.0 \u2014 unauthenticated local file inclusion via vcv-template. Educational PoC only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T19:00:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/045afa6e-e699-497e-bbdc-9aa55ec27daf/export</guid>
      <pubDate>Thu, 24 Sep 2026 19:00:06 +0000</pubDate>
    </item>
    <item>
      <title>89caf823-3a81-4948-acdf-2f76316635d4</title>
      <link>https://vulnerability.circl.lu/sighting/89caf823-3a81-4948-acdf-2f76316635d4/export</link>
      <description>{"uuid": "89caf823-3a81-4948-acdf-2f76316635d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227-visualcomposer-lfi-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 - Visual Composer &amp;lt;= 45.16.0 unauthenticated LFI via vcv-template (CVSS 9.8): Docker validation lab, safe-oracle PoC, nuclei template. Root cause: validate-then-mutate on the theme: prefix. Verified: vendor fix never landed - fires through 45.16.3 on WP &amp;lt;= 7.1.1; masked by WP 7.1.2 core gate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T18:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "89caf823-3a81-4948-acdf-2f76316635d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://t.me/GithubRedTeam/103264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227-visualcomposer-lfi-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 - Visual Composer &amp;lt;= 45.16.0 unauthenticated LFI via vcv-template (CVSS 9.8): Docker validation lab, safe-oracle PoC, nuclei template. Root cause: validate-then-mutate on the theme: prefix. Verified: vendor fix never landed - fires through 45.16.3 on WP &amp;lt;= 7.1.1; masked by WP 7.1.2 core gate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T18:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/89caf823-3a81-4948-acdf-2f76316635d4/export</guid>
      <pubDate>Thu, 24 Sep 2026 18:00:08 +0000</pubDate>
    </item>
    <item>
      <title>5c409a31-da5a-44ae-9080-c837cf0a6781</title>
      <link>https://vulnerability.circl.lu/sighting/5c409a31-da5a-44ae-9080-c837cf0a6781/export</link>
      <description>{"uuid": "5c409a31-da5a-44ae-9080-c837cf0a6781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227-visualcomposer-lfi-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 - Visual Composer &amp;lt;= 45.16.0 unauthenticated LFI via vcv-template (CVSS 9.8): Docker validation lab, safe-oracle PoC, nuclei template. Root cause: validate-then-mutate on the theme: prefix. Verified: vendor fix never landed - fires through 45.16.3 on WP &amp;lt;= 7.1.1; masked by WP 7.1.2 core gate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T18:00:08.000000Z"}</description>
      <content:encoded>{"uuid": "5c409a31-da5a-44ae-9080-c837cf0a6781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Nuclei\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-12227-visualcomposer-lfi-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 17:48:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-12227 - Visual Composer &amp;lt;= 45.16.0 unauthenticated LFI via vcv-template (CVSS 9.8): Docker validation lab, safe-oracle PoC, nuclei template. Root cause: validate-then-mutate on the theme: prefix. Verified: vendor fix never landed - fires through 45.16.3 on WP &amp;lt;= 7.1.1; masked by WP 7.1.2 core gate.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T18:00:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5c409a31-da5a-44ae-9080-c837cf0a6781/export</guid>
      <pubDate>Thu, 24 Sep 2026 18:00:08 +0000</pubDate>
    </item>
    <item>
      <title>5ee87da2-9e25-499f-b79b-685b14216e97</title>
      <link>https://vulnerability.circl.lu/sighting/5ee87da2-9e25-499f-b79b-685b14216e97/export</link>
      <description>{"uuid": "5ee87da2-9e25-499f-b79b-685b14216e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbamk45uy24", "content": "\ud83d\udd34 CVE-2026-12227 - Critical (9.8)\n\nThe Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12227/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T12:21:53.304008Z"}</description>
      <content:encoded>{"uuid": "5ee87da2-9e25-499f-b79b-685b14216e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12227", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwbamk45uy24", "content": "\ud83d\udd34 CVE-2026-12227 - Critical (9.8)\n\nThe Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-12227/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-24T12:21:53.304008Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5ee87da2-9e25-499f-b79b-685b14216e97/export</guid>
      <pubDate>Thu, 24 Sep 2026 12:21:53 +0000</pubDate>
    </item>
  </channel>
</rss>
