https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 03 Jul 2026 05:59:06 +0000 https://vulnerability.circl.lu/sighting/7777e37f-d400-42b0-9528-7248b0175bd5/export {"uuid": "7777e37f-d400-42b0-9528-7248b0175bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49777", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mozt5rdk5i2u", "content": "\ud83d\udea8 BREAKING\n\nThe free WordPress plugin was clean.\n\nThe paid update is what backdoored the site.\n\nShapedPlugin Pro updates stole admin logins and your 2FA seeds. A password reset will not clear it. (CVE-2026-49777)", "creation_timestamp": "2026-06-24T11:35:58.739505Z"} {"uuid": "7777e37f-d400-42b0-9528-7248b0175bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49777", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mozt5rdk5i2u", "content": "\ud83d\udea8 BREAKING\n\nThe free WordPress plugin was clean.\n\nThe paid update is what backdoored the site.\n\nShapedPlugin Pro updates stole admin logins and your 2FA seeds. A password reset will not clear it. (CVE-2026-49777)", "creation_timestamp": "2026-06-24T11:35:58.739505Z"} https://vulnerability.circl.lu/sighting/7777e37f-d400-42b0-9528-7248b0175bd5/export Wed, 24 Jun 2026 11:35:58 +0000 https://vulnerability.circl.lu/sighting/d1c0b124-02ad-49e8-bfb1-c770a0daae24/export {"uuid": "d1c0b124-02ad-49e8-bfb1-c770a0daae24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mofxjdokqq24", "content": "\ud83d\udd34 CVE-2026-49774 - Critical (9.9)\n\nImproper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49774/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T14:00:47.523766Z"} {"uuid": "d1c0b124-02ad-49e8-bfb1-c770a0daae24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mofxjdokqq24", "content": "\ud83d\udd34 CVE-2026-49774 - Critical (9.9)\n\nImproper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49774/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T14:00:47.523766Z"} https://vulnerability.circl.lu/sighting/d1c0b124-02ad-49e8-bfb1-c770a0daae24/export Tue, 16 Jun 2026 14:00:47 +0000 https://vulnerability.circl.lu/sighting/17e840fc-6c3c-4f34-916d-646be8ccf79c/export {"uuid": "17e840fc-6c3c-4f34-916d-646be8ccf79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49772", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mofw7xjz7z2v", "content": "CVE-2026-49772 - WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability\nCVE ID : CVE-2026-49772\n \n Published : June 16, 2026, 10:16 a.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('S...", "creation_timestamp": "2026-06-16T13:37:38.647123Z"} {"uuid": "17e840fc-6c3c-4f34-916d-646be8ccf79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49772", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mofw7xjz7z2v", "content": "CVE-2026-49772 - WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability\nCVE ID : CVE-2026-49772\n \n Published : June 16, 2026, 10:16 a.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('S...", "creation_timestamp": "2026-06-16T13:37:38.647123Z"} https://vulnerability.circl.lu/sighting/17e840fc-6c3c-4f34-916d-646be8ccf79c/export Tue, 16 Jun 2026 13:37:38 +0000 https://vulnerability.circl.lu/sighting/83e039b9-afc1-4298-8b9e-7196b31ec2c8/export {"uuid": "83e039b9-afc1-4298-8b9e-7196b31ec2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mofvcmldvk2g", "content": "CVE-2026-49774 - WordPress RD Station plugin\nCVE ID : CVE-2026-49774\n \n Published : June 16, 2026, 10:16 a.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station allows Remote Code Inclusi...", "creation_timestamp": "2026-06-16T13:21:13.633416Z"} {"uuid": "83e039b9-afc1-4298-8b9e-7196b31ec2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mofvcmldvk2g", "content": "CVE-2026-49774 - WordPress RD Station plugin\nCVE ID : CVE-2026-49774\n \n Published : June 16, 2026, 10:16 a.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station allows Remote Code Inclusi...", "creation_timestamp": "2026-06-16T13:21:13.633416Z"} https://vulnerability.circl.lu/sighting/83e039b9-afc1-4298-8b9e-7196b31ec2c8/export Tue, 16 Jun 2026 13:21:13 +0000 https://vulnerability.circl.lu/sighting/eda3282e-1d9c-40bb-8056-9f879faf7e1a/export {"uuid": "eda3282e-1d9c-40bb-8056-9f879faf7e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49772", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mofu6j6ze72f", "content": "\ud83d\udd34 CVE-2026-49772 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49772/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T13:01:19.567952Z"} {"uuid": "eda3282e-1d9c-40bb-8056-9f879faf7e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49772", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mofu6j6ze72f", "content": "\ud83d\udd34 CVE-2026-49772 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49772/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T13:01:19.567952Z"} https://vulnerability.circl.lu/sighting/eda3282e-1d9c-40bb-8056-9f879faf7e1a/export Tue, 16 Jun 2026 13:01:19 +0000 https://vulnerability.circl.lu/sighting/f4701f13-cabd-4412-b2dc-ec4fdc9208ad/export {"uuid": "f4701f13-cabd-4412-b2dc-ec4fdc9208ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49776", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moelx7tflz2o", "content": "\ud83d\udd34 CVE-2026-49776 - Critical (9.3)\n\nUnauthenticated SQL Injection in GPTranslate \u2013 Multilingual AI Translation for WordPress: Autom...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49776/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T01:01:09.022662Z"} {"uuid": "f4701f13-cabd-4412-b2dc-ec4fdc9208ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49776", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moelx7tflz2o", "content": "\ud83d\udd34 CVE-2026-49776 - Critical (9.3)\n\nUnauthenticated SQL Injection in GPTranslate \u2013 Multilingual AI Translation for WordPress: Autom...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49776/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T01:01:09.022662Z"} https://vulnerability.circl.lu/sighting/f4701f13-cabd-4412-b2dc-ec4fdc9208ad/export Tue, 16 Jun 2026 01:01:09 +0000 https://vulnerability.circl.lu/sighting/8bdbd073-e8d2-430f-aaa3-e1f0dfe4b0f9/export {"uuid": "8bdbd073-e8d2-430f-aaa3-e1f0dfe4b0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moelwyhvb224", "content": "\ud83d\udd34 CVE-2026-49770 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49770/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T01:01:01.627754Z"} {"uuid": "8bdbd073-e8d2-430f-aaa3-e1f0dfe4b0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moelwyhvb224", "content": "\ud83d\udd34 CVE-2026-49770 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49770/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T01:01:01.627754Z"} https://vulnerability.circl.lu/sighting/8bdbd073-e8d2-430f-aaa3-e1f0dfe4b0f9/export Tue, 16 Jun 2026 01:01:01 +0000 https://vulnerability.circl.lu/sighting/6b7b29cb-b980-4164-8b79-bd31f50de8a4/export {"uuid": "6b7b29cb-b980-4164-8b79-bd31f50de8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeajewr3o2h", "content": "CVE-2026-49776 - WordPress GPTranslate \u2013 Multilingual AI Translation for WordPress: Automatically Translate Websites plugin\nCVE ID : CVE-2026-49776\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in GPTranslate \u2013 Multilin...", "creation_timestamp": "2026-06-15T21:36:46.175087Z"} {"uuid": "6b7b29cb-b980-4164-8b79-bd31f50de8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeajewr3o2h", "content": "CVE-2026-49776 - WordPress GPTranslate \u2013 Multilingual AI Translation for WordPress: Automatically Translate Websites plugin\nCVE ID : CVE-2026-49776\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in GPTranslate \u2013 Multilin...", "creation_timestamp": "2026-06-15T21:36:46.175087Z"} https://vulnerability.circl.lu/sighting/6b7b29cb-b980-4164-8b79-bd31f50de8a4/export Mon, 15 Jun 2026 21:36:46 +0000 https://vulnerability.circl.lu/sighting/b1f4353e-cfa6-4b13-a5ff-6c0a2143569e/export {"uuid": "b1f4353e-cfa6-4b13-a5ff-6c0a2143569e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moea74g52u2m", "content": "CVE-2026-49770 - WordPress WP Travel Engine plugin\nCVE ID : CVE-2026-49770\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link fo...", "creation_timestamp": "2026-06-15T21:30:47.803822Z"} {"uuid": "b1f4353e-cfa6-4b13-a5ff-6c0a2143569e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moea74g52u2m", "content": "CVE-2026-49770 - WordPress WP Travel Engine plugin\nCVE ID : CVE-2026-49770\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link fo...", "creation_timestamp": "2026-06-15T21:30:47.803822Z"} https://vulnerability.circl.lu/sighting/b1f4353e-cfa6-4b13-a5ff-6c0a2143569e/export Mon, 15 Jun 2026 21:30:47 +0000 https://vulnerability.circl.lu/sighting/3e61c7d3-c8f3-424d-8f25-3e263a5b3ff2/export {"uuid": "3e61c7d3-c8f3-424d-8f25-3e263a5b3ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49778", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3modzcxu4oj2p", "content": "CVE-2026-49778 wpfunnels-pro (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #mashing #wpsecurity #atomicedge #potatosecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T19:27:41.344951Z"} {"uuid": "3e61c7d3-c8f3-424d-8f25-3e263a5b3ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49778", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3modzcxu4oj2p", "content": "CVE-2026-49778 wpfunnels-pro (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #mashing #wpsecurity #atomicedge #potatosecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-15T19:27:41.344951Z"} https://vulnerability.circl.lu/sighting/3e61c7d3-c8f3-424d-8f25-3e263a5b3ff2/export Mon, 15 Jun 2026 19:27:41 +0000