<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 16 Jun 2026 17:34:52 +0000</lastBuildDate>
    <item>
      <title>066f9e2b-7798-4b6d-9aea-3c21eee9511c</title>
      <link>https://vulnerability.circl.lu/sighting/066f9e2b-7798-4b6d-9aea-3c21eee9511c/export</link>
      <description>{"uuid": "066f9e2b-7798-4b6d-9aea-3c21eee9511c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnq72x5h5s2h", "content": "Critical Everest Forms Pro flaw exploited to take over WordPress sites\n\nHackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]\n#hackernews #news", "creation_timestamp": "2026-06-07T22:17:19.844192Z"}</description>
      <content:encoded>{"uuid": "066f9e2b-7798-4b6d-9aea-3c21eee9511c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnq72x5h5s2h", "content": "Critical Everest Forms Pro flaw exploited to take over WordPress sites\n\nHackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. [...]\n#hackernews #news", "creation_timestamp": "2026-06-07T22:17:19.844192Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/066f9e2b-7798-4b6d-9aea-3c21eee9511c/export</guid>
      <pubDate>Sun, 07 Jun 2026 22:17:19 +0000</pubDate>
    </item>
    <item>
      <title>8f4be107-5074-4bde-a4e7-d135bd9bc594</title>
      <link>https://vulnerability.circl.lu/sighting/8f4be107-5074-4bde-a4e7-d135bd9bc594/export</link>
      <description>{"uuid": "8f4be107-5074-4bde-a4e7-d135bd9bc594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnqnav4zj726", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-46243: 23 interactions\nCVE-2015-5119: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-4372: 4 interactions\nCVE-2022-0492: 3 interactions\nCVE-2026-3300: 3 interactions\n", "creation_timestamp": "2026-06-08T02:31:12.321332Z"}</description>
      <content:encoded>{"uuid": "8f4be107-5074-4bde-a4e7-d135bd9bc594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnqnav4zj726", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-46243: 23 interactions\nCVE-2015-5119: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-4372: 4 interactions\nCVE-2022-0492: 3 interactions\nCVE-2026-3300: 3 interactions\n", "creation_timestamp": "2026-06-08T02:31:12.321332Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8f4be107-5074-4bde-a4e7-d135bd9bc594/export</guid>
      <pubDate>Mon, 08 Jun 2026 02:31:12 +0000</pubDate>
    </item>
    <item>
      <title>902e6d1e-85b2-46b9-8ad8-15337c91376a</title>
      <link>https://vulnerability.circl.lu/sighting/902e6d1e-85b2-46b9-8ad8-15337c91376a/export</link>
      <description>{"uuid": "902e6d1e-85b2-46b9-8ad8-15337c91376a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3300", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnqwfd2dok2g", "content": "\ud83d\udcf0 Celah Keamanan Kritis Everest Forms Pro Dieksploitasi untuk Ambil Alih Situs WordPress\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/08/celah-everest-forms-pro-dieksploitasi-untuk-ambil-alih-wordpress/\n\n#cve-2026-3300 #diksimarina #eksploitasiRce #everestFormsPro #hacker #in", "creation_timestamp": "2026-06-08T05:14:44.523881Z"}</description>
      <content:encoded>{"uuid": "902e6d1e-85b2-46b9-8ad8-15337c91376a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3300", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnqwfd2dok2g", "content": "\ud83d\udcf0 Celah Keamanan Kritis Everest Forms Pro Dieksploitasi untuk Ambil Alih Situs WordPress\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/08/celah-everest-forms-pro-dieksploitasi-untuk-ambil-alih-wordpress/\n\n#cve-2026-3300 #diksimarina #eksploitasiRce #everestFormsPro #hacker #in", "creation_timestamp": "2026-06-08T05:14:44.523881Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/902e6d1e-85b2-46b9-8ad8-15337c91376a/export</guid>
      <pubDate>Mon, 08 Jun 2026 05:14:44 +0000</pubDate>
    </item>
    <item>
      <title>6976cc1b-ba93-4dc6-b66b-f05462d348e3</title>
      <link>https://vulnerability.circl.lu/sighting/6976cc1b-ba93-4dc6-b66b-f05462d348e3/export</link>
      <description>{"uuid": "6976cc1b-ba93-4dc6-b66b-f05462d348e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnrowknshm2k", "content": "Unauthenticated attackers can exploit CVE-2026-3300 in Everest Forms Pro to inject and execute arbitrary PHP via Complex Calculation, enabling site takeover.\n", "creation_timestamp": "2026-06-08T12:33:52.582629Z"}</description>
      <content:encoded>{"uuid": "6976cc1b-ba93-4dc6-b66b-f05462d348e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnrowknshm2k", "content": "Unauthenticated attackers can exploit CVE-2026-3300 in Everest Forms Pro to inject and execute arbitrary PHP via Complex Calculation, enabling site takeover.\n", "creation_timestamp": "2026-06-08T12:33:52.582629Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6976cc1b-ba93-4dc6-b66b-f05462d348e3/export</guid>
      <pubDate>Mon, 08 Jun 2026 12:33:52 +0000</pubDate>
    </item>
    <item>
      <title>31854fc4-f4ae-4e3d-9bd1-a93c1528124a</title>
      <link>https://vulnerability.circl.lu/sighting/31854fc4-f4ae-4e3d-9bd1-a93c1528124a/export</link>
      <description>{"uuid": "31854fc4-f4ae-4e3d-9bd1-a93c1528124a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/365tipu.cz/post/3mnrttaipd22r", "content": "Defiant varuje p\u0159ed kritickou zranitelnost\u00ed CVE-2026-3300 v pluginu Everest Forms Pro pro WordPress", "creation_timestamp": "2026-06-08T14:01:29.872262Z"}</description>
      <content:encoded>{"uuid": "31854fc4-f4ae-4e3d-9bd1-a93c1528124a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/365tipu.cz/post/3mnrttaipd22r", "content": "Defiant varuje p\u0159ed kritickou zranitelnost\u00ed CVE-2026-3300 v pluginu Everest Forms Pro pro WordPress", "creation_timestamp": "2026-06-08T14:01:29.872262Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/31854fc4-f4ae-4e3d-9bd1-a93c1528124a/export</guid>
      <pubDate>Mon, 08 Jun 2026 14:01:29 +0000</pubDate>
    </item>
    <item>
      <title>9f13f543-2046-4c26-a0c5-de8139f68fbe</title>
      <link>https://vulnerability.circl.lu/sighting/9f13f543-2046-4c26-a0c5-de8139f68fbe/export</link>
      <description>{"uuid": "9f13f543-2046-4c26-a0c5-de8139f68fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3mnrynlbdy422", "content": "Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Hackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP via form fields, creating rogue admin accounts. 29,300 attempts b...\n\n#Breaking #News #Hacking #Security #Cybercrime [\u2026] \n\n[Original post on securityaffairs.com]", "creation_timestamp": "2026-06-08T15:27:55.147685Z"}</description>
      <content:encoded>{"uuid": "9f13f543-2046-4c26-a0c5-de8139f68fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3mnrynlbdy422", "content": "Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Hackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP via form fields, creating rogue admin accounts. 29,300 attempts b...\n\n#Breaking #News #Hacking #Security #Cybercrime [\u2026] \n\n[Original post on securityaffairs.com]", "creation_timestamp": "2026-06-08T15:27:55.147685Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9f13f543-2046-4c26-a0c5-de8139f68fbe/export</guid>
      <pubDate>Mon, 08 Jun 2026 15:27:55 +0000</pubDate>
    </item>
    <item>
      <title>516380ba-a606-467e-a3c8-c63b78fabe45</title>
      <link>https://vulnerability.circl.lu/sighting/516380ba-a606-467e-a3c8-c63b78fabe45/export</link>
      <description>{"uuid": "516380ba-a606-467e-a3c8-c63b78fabe45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnrzn3kuyf27", "content": "Critical Everest Forms Pro flaw (CVE-2026-3300) has been exploited for months to inject PHP, create admin accounts, and deploy web shells on WordPress sites. #EverestForms #CVE2026 #WordPress", "creation_timestamp": "2026-06-08T15:45:26.162100Z"}</description>
      <content:encoded>{"uuid": "516380ba-a606-467e-a3c8-c63b78fabe45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnrzn3kuyf27", "content": "Critical Everest Forms Pro flaw (CVE-2026-3300) has been exploited for months to inject PHP, create admin accounts, and deploy web shells on WordPress sites. #EverestForms #CVE2026 #WordPress", "creation_timestamp": "2026-06-08T15:45:26.162100Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/516380ba-a606-467e-a3c8-c63b78fabe45/export</guid>
      <pubDate>Mon, 08 Jun 2026 15:45:26 +0000</pubDate>
    </item>
    <item>
      <title>959d3cf6-4b30-4a5a-95c0-75cc69687ce6</title>
      <link>https://vulnerability.circl.lu/sighting/959d3cf6-4b30-4a5a-95c0-75cc69687ce6/export</link>
      <description>{"uuid": "959d3cf6-4b30-4a5a-95c0-75cc69687ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3300", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mnsolkljqo2t", "content": "\ud83d\udce2 Exploitation active de CVE-2026-3300 dans Everest Forms Pro pour compromettre des sites WordPress\n\ud83d\udcdd \ud83d\udcf0 **Source** : BleepingCompute\u2026\nhttps://cyberveille.ch/posts/2026-06-08-exploitation-active-de-cve-2026-3300-dans-everest-forms-pro-pour-compromettre-des-sites-wordpress/ #CVE_2026_3300 #Cyberveille", "creation_timestamp": "2026-06-08T22:00:22.649052Z"}</description>
      <content:encoded>{"uuid": "959d3cf6-4b30-4a5a-95c0-75cc69687ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3300", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mnsolkljqo2t", "content": "\ud83d\udce2 Exploitation active de CVE-2026-3300 dans Everest Forms Pro pour compromettre des sites WordPress\n\ud83d\udcdd \ud83d\udcf0 **Source** : BleepingCompute\u2026\nhttps://cyberveille.ch/posts/2026-06-08-exploitation-active-de-cve-2026-3300-dans-everest-forms-pro-pour-compromettre-des-sites-wordpress/ #CVE_2026_3300 #Cyberveille", "creation_timestamp": "2026-06-08T22:00:22.649052Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/959d3cf6-4b30-4a5a-95c0-75cc69687ce6/export</guid>
      <pubDate>Mon, 08 Jun 2026 22:00:22 +0000</pubDate>
    </item>
    <item>
      <title>aca7a039-0836-4d82-b02a-b9ada9ec9b4f</title>
      <link>https://vulnerability.circl.lu/sighting/aca7a039-0836-4d82-b02a-b9ada9ec9b4f/export</link>
      <description>{"uuid": "aca7a039-0836-4d82-b02a-b9ada9ec9b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mntth7xbws2h", "content": "Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access\n\nHackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP via form fields, creating rogue admin accounts. 29,300 attempts blocked. Researcher h0xilo submitted a flaw in Everest Forms Pro for WordPress, trac\u2026\n#hackernews #news", "creation_timestamp": "2026-06-09T09:00:05.915630Z"}</description>
      <content:encoded>{"uuid": "aca7a039-0836-4d82-b02a-b9ada9ec9b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mntth7xbws2h", "content": "Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access\n\nHackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP via form fields, creating rogue admin accounts. 29,300 attempts blocked. Researcher h0xilo submitted a flaw in Everest Forms Pro for WordPress, trac\u2026\n#hackernews #news", "creation_timestamp": "2026-06-09T09:00:05.915630Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aca7a039-0836-4d82-b02a-b9ada9ec9b4f/export</guid>
      <pubDate>Tue, 09 Jun 2026 09:00:05 +0000</pubDate>
    </item>
    <item>
      <title>c18265d1-85af-4cdb-a8f7-0daf9f8bd2f0</title>
      <link>https://vulnerability.circl.lu/sighting/c18265d1-85af-4cdb-a8f7-0daf9f8bd2f0/export</link>
      <description>{"uuid": "c18265d1-85af-4cdb-a8f7-0daf9f8bd2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-3300.yaml", "content": "", "creation_timestamp": "2026-06-09T10:03:15.000000Z"}</description>
      <content:encoded>{"uuid": "c18265d1-85af-4cdb-a8f7-0daf9f8bd2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3300", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-3300.yaml", "content": "", "creation_timestamp": "2026-06-09T10:03:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c18265d1-85af-4cdb-a8f7-0daf9f8bd2f0/export</guid>
      <pubDate>Tue, 09 Jun 2026 10:03:15 +0000</pubDate>
    </item>
  </channel>
</rss>
