https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 21 Aug 2026 09:24:33 +0000 https://vulnerability.circl.lu/sighting/be378c2f-a6b7-4a24-b570-c1989d9596eb/export {"uuid": "be378c2f-a6b7-4a24-b570-c1989d9596eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dsvweyrngxjsj", "content": "CVE-2026-15341 - User Session Synchronizer\nCVE ID : CVE-2026-15341\n \n Published : Aug. 15, 2026, 3:16 a.m. | 56\u00a0minutes ago\n \n Description : The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up...", "creation_timestamp": "2026-08-15T04:45:26.792893Z"} {"uuid": "be378c2f-a6b7-4a24-b570-c1989d9596eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dsvweyrngxjsj", "content": "CVE-2026-15341 - User Session Synchronizer\nCVE ID : CVE-2026-15341\n \n Published : Aug. 15, 2026, 3:16 a.m. | 56\u00a0minutes ago\n \n Description : The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up...", "creation_timestamp": "2026-08-15T04:45:26.792893Z"} https://vulnerability.circl.lu/sighting/be378c2f-a6b7-4a24-b570-c1989d9596eb/export Sat, 15 Aug 2026 04:45:26 +0000 https://vulnerability.circl.lu/sighting/1da43064-a20b-485d-a6f3-5c41ff391584/export {"uuid": "1da43064-a20b-485d-a6f3-5c41ff391584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt3rxckbjq2z", "content": "WordPress Admins Borrowed Without Consent, Security Team Still Filling Forms\nPANIC 84% | Lag 0.0h | CVE-2026-15341 affects WordPress User Session Synchronizer up to 1.4.0 and allows unauthenticated ac\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-15T04:00:33.999080Z"} {"uuid": "1da43064-a20b-485d-a6f3-5c41ff391584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt3rxckbjq2z", "content": "WordPress Admins Borrowed Without Consent, Security Team Still Filling Forms\nPANIC 84% | Lag 0.0h | CVE-2026-15341 affects WordPress User Session Synchronizer up to 1.4.0 and allows unauthenticated ac\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-15T04:00:33.999080Z"} https://vulnerability.circl.lu/sighting/1da43064-a20b-485d-a6f3-5c41ff391584/export Sat, 15 Aug 2026 04:00:33 +0000 https://vulnerability.circl.lu/sighting/e19fdd0f-a61b-4df2-86f9-83bde89661b8/export {"uuid": "e19fdd0f-a61b-4df2-86f9-83bde89661b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt3povhrl72e", "content": "CVE-2026-15341 - user session synchronizer\nAn attacker can gain full access to any WordPress account, including administrator accounts, without needing a password. This is possible due to a flaw in the User Session\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rafasashi #CVE #infosec", "creation_timestamp": "2026-08-15T03:20:04.216294Z"} {"uuid": "e19fdd0f-a61b-4df2-86f9-83bde89661b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15341", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt3povhrl72e", "content": "CVE-2026-15341 - user session synchronizer\nAn attacker can gain full access to any WordPress account, including administrator accounts, without needing a password. This is possible due to a flaw in the User Session\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rafasashi #CVE #infosec", "creation_timestamp": "2026-08-15T03:20:04.216294Z"} https://vulnerability.circl.lu/sighting/e19fdd0f-a61b-4df2-86f9-83bde89661b8/export Sat, 15 Aug 2026 03:20:04 +0000 https://vulnerability.circl.lu/sighting/070bf433-fcf8-403f-b788-0926948a86b9/export {"uuid": "070bf433-fcf8-403f-b788-0926948a86b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15341", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3olr7vcm2a", "content": "CRITICAL: rafasashi User Session Synchronizer \u22641.4.0 has an auth bypass flaw (CVE-2026-15341). Attackers can impersonate any user \u2014 including admins. Disable plugin ASAP. https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e...", "creation_timestamp": "2026-08-15T03:00:25.780239Z"} {"uuid": "070bf433-fcf8-403f-b788-0926948a86b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15341", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt3olr7vcm2a", "content": "CRITICAL: rafasashi User Session Synchronizer \u22641.4.0 has an auth bypass flaw (CVE-2026-15341). Attackers can impersonate any user \u2014 including admins. Disable plugin ASAP. https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e...", "creation_timestamp": "2026-08-15T03:00:25.780239Z"} https://vulnerability.circl.lu/sighting/070bf433-fcf8-403f-b788-0926948a86b9/export Sat, 15 Aug 2026 03:00:25 +0000 https://vulnerability.circl.lu/sighting/da2df05a-70a3-42a2-9445-9b2733dc03ea/export {"uuid": "da2df05a-70a3-42a2-9445-9b2733dc03ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15341", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097288379770973", "content": "CVE-2026-15341: CRITICAL auth bypass in rafasashi User Session Synchronizer \u22641.4.0. Attackers can impersonate any WP user \u2014 including admins. Disable plugin until fix is released. \ud83d\udd13 https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e5e90d3fb #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-08-15T03:00:23.988997Z"} {"uuid": "da2df05a-70a3-42a2-9445-9b2733dc03ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15341", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117097288379770973", "content": "CVE-2026-15341: CRITICAL auth bypass in rafasashi User Session Synchronizer \u22641.4.0. Attackers can impersonate any WP user \u2014 including admins. Disable plugin until fix is released. \ud83d\udd13 https://radar.offseq.com/threat/cve-2026-15341-cwe-287-improper-authentication-in-rafasashi-user-session-synchronizer-d4decb8e5e90d3fb #OffSeq #WordPress #Vuln #Infosec", "creation_timestamp": "2026-08-15T03:00:23.988997Z"} https://vulnerability.circl.lu/sighting/da2df05a-70a3-42a2-9445-9b2733dc03ea/export Sat, 15 Aug 2026 03:00:23 +0000