https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:37:01 +0000 https://vulnerability.circl.lu/sighting/19b77f6e-ba0b-4158-9963-84f2d332c819/export {"uuid": "19b77f6e-ba0b-4158-9963-84f2d332c819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75962", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx6qvlsjzn2x", "content": "Post SMTP WordPress plugin (<=4.0.1) hit by HIGH severity stored XSS. Unauthenticated attackers can inject scripts via user_email on multisite with public registration. Mitigate now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-75962-cwe-79-improper-neutralization-of-input-during-web-page-generatio...", "creation_timestamp": "2026-10-06T06:00:29.729521Z"} {"uuid": "19b77f6e-ba0b-4158-9963-84f2d332c819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75962", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx6qvlsjzn2x", "content": "Post SMTP WordPress plugin (<=4.0.1) hit by HIGH severity stored XSS. Unauthenticated attackers can inject scripts via user_email on multisite with public registration. Mitigate now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-75962-cwe-79-improper-neutralization-of-input-during-web-page-generatio...", "creation_timestamp": "2026-10-06T06:00:29.729521Z"} https://vulnerability.circl.lu/sighting/19b77f6e-ba0b-4158-9963-84f2d332c819/export Tue, 06 Oct 2026 06:00:29 +0000 https://vulnerability.circl.lu/sighting/09aa1f1b-fa52-4a53-af94-93b2d4dbe680/export {"uuid": "09aa1f1b-fa52-4a53-af94-93b2d4dbe680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75962", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117392436495694763", "content": "CVE-2026-75962: HIGH severity stored XSS in Post SMTP WordPress plugin (<=4.0.1). Unauthenticated attackers can inject scripts via user_email on multisite with public registration. Patch or restrict registration. https://radar.offseq.com/threat/cve-2026-75962-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-4d025f1757070abe #OffSeq #WordPress #XSS #Infosec", "creation_timestamp": "2026-10-06T06:00:26.970726Z"} {"uuid": "09aa1f1b-fa52-4a53-af94-93b2d4dbe680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75962", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117392436495694763", "content": "CVE-2026-75962: HIGH severity stored XSS in Post SMTP WordPress plugin (<=4.0.1). Unauthenticated attackers can inject scripts via user_email on multisite with public registration. Patch or restrict registration. https://radar.offseq.com/threat/cve-2026-75962-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-4d025f1757070abe #OffSeq #WordPress #XSS #Infosec", "creation_timestamp": "2026-10-06T06:00:26.970726Z"} https://vulnerability.circl.lu/sighting/09aa1f1b-fa52-4a53-af94-93b2d4dbe680/export Tue, 06 Oct 2026 06:00:26 +0000