https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 26 Jul 2026 22:25:12 +0000 https://vulnerability.circl.lu/sighting/2995d381-3582-4fe0-ac7a-13f3659bddb8/export {"uuid": "2995d381-3582-4fe0-ac7a-13f3659bddb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116985968490540461", "content": "CVE-2026-15962 - Insecure Deserialization in Fluent Forms Pro allows authenticated attackers to escalate to admin account takeover. CVSS 8.8. No patch yet \u2013 disable user update integration to mitigate. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-15962/", "creation_timestamp": "2026-07-26T11:10:17.410504Z"} {"uuid": "2995d381-3582-4fe0-ac7a-13f3659bddb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116985968490540461", "content": "CVE-2026-15962 - Insecure Deserialization in Fluent Forms Pro allows authenticated attackers to escalate to admin account takeover. CVSS 8.8. No patch yet \u2013 disable user update integration to mitigate. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-15962/", "creation_timestamp": "2026-07-26T11:10:17.410504Z"} https://vulnerability.circl.lu/sighting/2995d381-3582-4fe0-ac7a-13f3659bddb8/export Sun, 26 Jul 2026 11:10:17 +0000 https://vulnerability.circl.lu/sighting/d8e49c44-01d9-4f94-ac21-04ef66f5c1a3/export {"uuid": "d8e49c44-01d9-4f94-ac21-04ef66f5c1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrkanbswvq2u", "content": "CVE-2026-15962 - Insecure Deserialization in Fluent Forms Pro allows authenticated attackers to escalate to admin account takeover. CVSS 8.8. No patch yet \u2013 disable user update integration to mitigate. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-15962/", "creation_timestamp": "2026-07-26T11:10:16.710666Z"} {"uuid": "d8e49c44-01d9-4f94-ac21-04ef66f5c1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrkanbswvq2u", "content": "CVE-2026-15962 - Insecure Deserialization in Fluent Forms Pro allows authenticated attackers to escalate to admin account takeover. CVSS 8.8. No patch yet \u2013 disable user update integration to mitigate. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-15962/", "creation_timestamp": "2026-07-26T11:10:16.710666Z"} https://vulnerability.circl.lu/sighting/d8e49c44-01d9-4f94-ac21-04ef66f5c1a3/export Sun, 26 Jul 2026 11:10:16 +0000 https://vulnerability.circl.lu/sighting/a1be8799-20f0-4327-93b0-f0c9a7225807/export {"uuid": "a1be8799-20f0-4327-93b0-f0c9a7225807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://gist.github.com/ichintu/6c425384b38fcad1e38e69c361a0752d", "content": "**CVE-2026-15962 \u2013 Fluent Forms Pro Add\u2011On Pack (\u2264\u202f6.2.6)** \n- **Published:** July\u202f26\u202f2026 \n- **Issue:** PHP object injection via deserialization of untrusted input in all affected versions. \n- **Impact:** Subscribers or higher can inject PHP objects; with the user\u2011update integration enabled and a mapped user\u2011meta field, attackers can trigger a protected object\u2011property (POP) chain to change any user\u2019s password, potentially taking over admin accounts. \n- **Severity:** 8.8 (High)", "creation_timestamp": "2026-07-26T08:01:33.479959Z"} {"uuid": "a1be8799-20f0-4327-93b0-f0c9a7225807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://gist.github.com/ichintu/6c425384b38fcad1e38e69c361a0752d", "content": "**CVE-2026-15962 \u2013 Fluent Forms Pro Add\u2011On Pack (\u2264\u202f6.2.6)** \n- **Published:** July\u202f26\u202f2026 \n- **Issue:** PHP object injection via deserialization of untrusted input in all affected versions. \n- **Impact:** Subscribers or higher can inject PHP objects; with the user\u2011update integration enabled and a mapped user\u2011meta field, attackers can trigger a protected object\u2011property (POP) chain to change any user\u2019s password, potentially taking over admin accounts. \n- **Severity:** 8.8 (High)", "creation_timestamp": "2026-07-26T08:01:33.479959Z"} https://vulnerability.circl.lu/sighting/a1be8799-20f0-4327-93b0-f0c9a7225807/export Sun, 26 Jul 2026 08:01:33 +0000 https://vulnerability.circl.lu/sighting/273932bc-e829-48c3-9f62-72189b47a1f5/export {"uuid": "273932bc-e829-48c3-9f62-72189b47a1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrjhpfps5f2y", "content": "Fluent Forms Pro Add On Pack\uff08WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\uff09\u306f\u3001PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u9650\u5b9a\u7684\u306a\u6761\u4ef6\u4e0b\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u304c\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4\u3084\u7ba1\u2026\nCVE-2026-15962 CVSS 8.8 | HIGH", "creation_timestamp": "2026-07-26T03:44:05.162382Z"} {"uuid": "273932bc-e829-48c3-9f62-72189b47a1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrjhpfps5f2y", "content": "Fluent Forms Pro Add On Pack\uff08WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\uff09\u306f\u3001PHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u9650\u5b9a\u7684\u306a\u6761\u4ef6\u4e0b\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u304c\u30d1\u30b9\u30ef\u30fc\u30c9\u5909\u66f4\u3084\u7ba1\u2026\nCVE-2026-15962 CVSS 8.8 | HIGH", "creation_timestamp": "2026-07-26T03:44:05.162382Z"} https://vulnerability.circl.lu/sighting/273932bc-e829-48c3-9f62-72189b47a1f5/export Sun, 26 Jul 2026 03:44:05 +0000 https://vulnerability.circl.lu/sighting/87ea24b4-c379-40fe-8699-388722d07300/export {"uuid": "87ea24b4-c379-40fe-8699-388722d07300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrjfbhv63b2c", "content": "\ud83d\udfe0 CVE-2026-15962 - High (8.8)\n\nThe Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15962/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-26T03:00:29.936334Z"} {"uuid": "87ea24b4-c379-40fe-8699-388722d07300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15962", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrjfbhv63b2c", "content": "\ud83d\udfe0 CVE-2026-15962 - High (8.8)\n\nThe Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15962/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-26T03:00:29.936334Z"} https://vulnerability.circl.lu/sighting/87ea24b4-c379-40fe-8699-388722d07300/export Sun, 26 Jul 2026 03:00:29 +0000