<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 25 Jun 2026 08:00:59 +0000</lastBuildDate>
    <item>
      <title>5757d439-2607-440b-aee4-839c4ccb71e4</title>
      <link>https://vulnerability.circl.lu/sighting/5757d439-2607-440b-aee4-839c4ccb71e4/export</link>
      <description>{"uuid": "5757d439-2607-440b-aee4-839c4ccb71e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mod5tzkdau2o", "content": "CVE-2026-49106 cf7-constant-contact (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T11:16:08.873181Z"}</description>
      <content:encoded>{"uuid": "5757d439-2607-440b-aee4-839c4ccb71e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mod5tzkdau2o", "content": "CVE-2026-49106 cf7-constant-contact (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T11:16:08.873181Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5757d439-2607-440b-aee4-839c4ccb71e4/export</guid>
      <pubDate>Mon, 15 Jun 2026 11:16:08 +0000</pubDate>
    </item>
    <item>
      <title>db3b7b63-ee09-45e3-abf3-ecd4a3cecf89</title>
      <link>https://vulnerability.circl.lu/sighting/db3b7b63-ee09-45e3-abf3-ecd4a3cecf89/export</link>
      <description>{"uuid": "db3b7b63-ee09-45e3-abf3-ecd4a3cecf89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7loee362e", "content": "CVE-2026-49105 - WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin\nCVE ID : CVE-2026-49105\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in WP Zendesk for Contact Form...", "creation_timestamp": "2026-06-15T21:19:55.685948Z"}</description>
      <content:encoded>{"uuid": "db3b7b63-ee09-45e3-abf3-ecd4a3cecf89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7loee362e", "content": "CVE-2026-49105 - WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin\nCVE ID : CVE-2026-49105\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in WP Zendesk for Contact Form...", "creation_timestamp": "2026-06-15T21:19:55.685948Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/db3b7b63-ee09-45e3-abf3-ecd4a3cecf89/export</guid>
      <pubDate>Mon, 15 Jun 2026 21:19:55 +0000</pubDate>
    </item>
    <item>
      <title>1b020694-7b7d-4be7-a743-8f03b16f0e59</title>
      <link>https://vulnerability.circl.lu/sighting/1b020694-7b7d-4be7-a743-8f03b16f0e59/export</link>
      <description>{"uuid": "1b020694-7b7d-4be7-a743-8f03b16f0e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7p24cel2p", "content": "CVE-2026-49106 - WordPress Integration for Contact Form 7 and Constant Contact plugin\nCVE ID : CVE-2026-49106\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact &amp;amp;...", "creation_timestamp": "2026-06-15T21:21:48.595080Z"}</description>
      <content:encoded>{"uuid": "1b020694-7b7d-4be7-a743-8f03b16f0e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7p24cel2p", "content": "CVE-2026-49106 - WordPress Integration for Contact Form 7 and Constant Contact plugin\nCVE ID : CVE-2026-49106\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact &amp;amp;...", "creation_timestamp": "2026-06-15T21:21:48.595080Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1b020694-7b7d-4be7-a743-8f03b16f0e59/export</guid>
      <pubDate>Mon, 15 Jun 2026 21:21:48 +0000</pubDate>
    </item>
    <item>
      <title>b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d</title>
      <link>https://vulnerability.circl.lu/sighting/b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d/export</link>
      <description>{"uuid": "b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7sn2m4m2e", "content": "CVE-2026-49104 - WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin\nCVE ID : CVE-2026-49104\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integra...", "creation_timestamp": "2026-06-15T21:23:49.112344Z"}</description>
      <content:encoded>{"uuid": "b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7sn2m4m2e", "content": "CVE-2026-49104 - WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin\nCVE ID : CVE-2026-49104\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integra...", "creation_timestamp": "2026-06-15T21:23:49.112344Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b5dd38c9-7b2f-47b2-8ce4-17aaf3bfb84d/export</guid>
      <pubDate>Mon, 15 Jun 2026 21:23:49 +0000</pubDate>
    </item>
    <item>
      <title>e39032c2-ead1-44a9-b726-80016d1c666f</title>
      <link>https://vulnerability.circl.lu/sighting/e39032c2-ead1-44a9-b726-80016d1c666f/export</link>
      <description>{"uuid": "e39032c2-ead1-44a9-b726-80016d1c666f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7wiafh22m", "content": "CVE-2026-49109 - WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin\nCVE ID : CVE-2026-49109\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integration fo...", "creation_timestamp": "2026-06-15T21:25:58.131637Z"}</description>
      <content:encoded>{"uuid": "e39032c2-ead1-44a9-b726-80016d1c666f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7wiafh22m", "content": "CVE-2026-49109 - WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin\nCVE ID : CVE-2026-49109\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Integration fo...", "creation_timestamp": "2026-06-15T21:25:58.131637Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e39032c2-ead1-44a9-b726-80016d1c666f/export</guid>
      <pubDate>Mon, 15 Jun 2026 21:25:58 +0000</pubDate>
    </item>
    <item>
      <title>ee0855f0-554d-4f93-9f84-8ec2ad2aa093</title>
      <link>https://vulnerability.circl.lu/sighting/ee0855f0-554d-4f93-9f84-8ec2ad2aa093/export</link>
      <description>{"uuid": "ee0855f0-554d-4f93-9f84-8ec2ad2aa093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49104", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohttuu3tp2c", "content": "\ud83d\udd34 CVE-2026-49104 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPF...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49104/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:25.867045Z"}</description>
      <content:encoded>{"uuid": "ee0855f0-554d-4f93-9f84-8ec2ad2aa093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49104", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohttuu3tp2c", "content": "\ud83d\udd34 CVE-2026-49104 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPF...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49104/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:25.867045Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ee0855f0-554d-4f93-9f84-8ec2ad2aa093/export</guid>
      <pubDate>Wed, 17 Jun 2026 08:00:25 +0000</pubDate>
    </item>
    <item>
      <title>619bb9da-6f76-4889-9567-ee1c49352f0f</title>
      <link>https://vulnerability.circl.lu/sighting/619bb9da-6f76-4889-9567-ee1c49352f0f/export</link>
      <description>{"uuid": "619bb9da-6f76-4889-9567-ee1c49352f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohtu3wyo725", "content": "\ud83d\udd34 CVE-2026-49105 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formid...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:33.315987Z"}</description>
      <content:encoded>{"uuid": "619bb9da-6f76-4889-9567-ee1c49352f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohtu3wyo725", "content": "\ud83d\udd34 CVE-2026-49105 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formid...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49105/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:33.315987Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/619bb9da-6f76-4889-9567-ee1c49352f0f/export</guid>
      <pubDate>Wed, 17 Jun 2026 08:00:33 +0000</pubDate>
    </item>
    <item>
      <title>1f071bdd-778e-4cd3-a694-34060ff32de0</title>
      <link>https://vulnerability.circl.lu/sighting/1f071bdd-778e-4cd3-a694-34060ff32de0/export</link>
      <description>{"uuid": "1f071bdd-778e-4cd3-a694-34060ff32de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohtugcktz2t", "content": "\ud83d\udd34 CVE-2026-49106 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact &amp;lt;=...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49106/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:44.804502Z"}</description>
      <content:encoded>{"uuid": "1f071bdd-778e-4cd3-a694-34060ff32de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49106", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohtugcktz2t", "content": "\ud83d\udd34 CVE-2026-49106 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact &amp;lt;=...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49106/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T08:00:44.804502Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1f071bdd-778e-4cd3-a694-34060ff32de0/export</guid>
      <pubDate>Wed, 17 Jun 2026 08:00:44 +0000</pubDate>
    </item>
    <item>
      <title>58be1c7d-0926-4e7c-a7df-4c553dc89f44</title>
      <link>https://vulnerability.circl.lu/sighting/58be1c7d-0926-4e7c-a7df-4c553dc89f44/export</link>
      <description>{"uuid": "58be1c7d-0926-4e7c-a7df-4c553dc89f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49109", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moi2kgsr2u2k", "content": "\ud83d\udd34 CVE-2026-49109 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, E...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49109/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T10:01:03.658988Z"}</description>
      <content:encoded>{"uuid": "58be1c7d-0926-4e7c-a7df-4c553dc89f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49109", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moi2kgsr2u2k", "content": "\ud83d\udd34 CVE-2026-49109 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, E...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49109/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T10:01:03.658988Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/58be1c7d-0926-4e7c-a7df-4c553dc89f44/export</guid>
      <pubDate>Wed, 17 Jun 2026 10:01:03 +0000</pubDate>
    </item>
    <item>
      <title>1f7c41dc-423d-4e42-8a33-684b64c43d90</title>
      <link>https://vulnerability.circl.lu/sighting/1f7c41dc-423d-4e42-8a33-684b64c43d90/export</link>
      <description>{"uuid": "1f7c41dc-423d-4e42-8a33-684b64c43d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moik3lnzzg2c", "content": "CVE-2026-49107 - WordPress Thrive Apprentice plugin\nCVE ID : CVE-2026-49107\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Thrive Apprentice &amp;lt; 10.8.10.2 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visi...", "creation_timestamp": "2026-06-17T14:38:26.006390Z"}</description>
      <content:encoded>{"uuid": "1f7c41dc-423d-4e42-8a33-684b64c43d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moik3lnzzg2c", "content": "CVE-2026-49107 - WordPress Thrive Apprentice plugin\nCVE ID : CVE-2026-49107\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in Thrive Apprentice &amp;lt; 10.8.10.2 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visi...", "creation_timestamp": "2026-06-17T14:38:26.006390Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1f7c41dc-423d-4e42-8a33-684b64c43d90/export</guid>
      <pubDate>Wed, 17 Jun 2026 14:38:26 +0000</pubDate>
    </item>
  </channel>
</rss>
