https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 11:09:18 +0000 https://vulnerability.circl.lu/sighting/4080b1d9-1da2-4640-b4ed-97c5dc4c00e5/export {"uuid": "4080b1d9-1da2-4640-b4ed-97c5dc4c00e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwivg6bjay2v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-82901: The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the \u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-82901\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T13:22:45.487301Z"} {"uuid": "4080b1d9-1da2-4640-b4ed-97c5dc4c00e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwivg6bjay2v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-82901: The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the \u2026\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-82901\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T13:22:45.487301Z"} https://vulnerability.circl.lu/sighting/4080b1d9-1da2-4640-b4ed-97c5dc4c00e5/export Sun, 27 Sep 2026 13:22:45 +0000 https://vulnerability.circl.lu/sighting/ddbd1a75-7b29-4c99-b512-876c4d30bd50/export {"uuid": "ddbd1a75-7b29-4c99-b512-876c4d30bd50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "published-proof-of-concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} {"uuid": "ddbd1a75-7b29-4c99-b512-876c4d30bd50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "published-proof-of-concept", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} https://vulnerability.circl.lu/sighting/ddbd1a75-7b29-4c99-b512-876c4d30bd50/export Sun, 27 Sep 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/36efdd33-f3ab-41ab-9b72-b658a6cef123/export {"uuid": "36efdd33-f3ab-41ab-9b72-b658a6cef123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} {"uuid": "36efdd33-f3ab-41ab-9b72-b658a6cef123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "Telegram/bthUwEydglWykkPvRI1AZQI-_R5qiWbBEj7i9q47DZSvdxk", "content": "", "creation_timestamp": "2026-09-27T09:00:04.000000Z"} https://vulnerability.circl.lu/sighting/36efdd33-f3ab-41ab-9b72-b658a6cef123/export Sun, 27 Sep 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/6bf03976-cc88-4c24-bc60-1675fe690a63/export {"uuid": "6bf03976-cc88-4c24-bc60-1675fe690a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "published-proof-of-concept", "source": "Telegram/p3dYGgWnG8fmLkkUzShxHg-2DTS1_J4yi6svLDGp4dVNyII", "content": "", "creation_timestamp": "2026-09-27T03:00:13.000000Z"} {"uuid": "6bf03976-cc88-4c24-bc60-1675fe690a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "published-proof-of-concept", "source": "Telegram/p3dYGgWnG8fmLkkUzShxHg-2DTS1_J4yi6svLDGp4dVNyII", "content": "", "creation_timestamp": "2026-09-27T03:00:13.000000Z"} https://vulnerability.circl.lu/sighting/6bf03976-cc88-4c24-bc60-1675fe690a63/export Sun, 27 Sep 2026 03:00:13 +0000 https://vulnerability.circl.lu/sighting/282be595-8e73-450d-88f3-ef6238cd6744/export {"uuid": "282be595-8e73-450d-88f3-ef6238cd6744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "Telegram/p3dYGgWnG8fmLkkUzShxHg-2DTS1_J4yi6svLDGp4dVNyII", "content": "", "creation_timestamp": "2026-09-27T03:00:13.000000Z"} {"uuid": "282be595-8e73-450d-88f3-ef6238cd6744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "Telegram/p3dYGgWnG8fmLkkUzShxHg-2DTS1_J4yi6svLDGp4dVNyII", "content": "", "creation_timestamp": "2026-09-27T03:00:13.000000Z"} https://vulnerability.circl.lu/sighting/282be595-8e73-450d-88f3-ef6238cd6744/export Sun, 27 Sep 2026 03:00:13 +0000 https://vulnerability.circl.lu/sighting/3c3447a8-5b12-4f3d-8b96-10a3f87df1eb/export {"uuid": "3c3447a8-5b12-4f3d-8b96-10a3f87df1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82901", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhiltdqgj2m", "content": "Ultra Addons for Contact Form 7 \u22643.5.50 has a CRITICAL file upload vulnerability (CVSS 9.8). RCE possible if PDF Generator is enabled. Disable the module & monitor for updates. https://radar.offseq.com/threat/cve-2026-82901-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-themefic-ultra...", "creation_timestamp": "2026-09-27T00:00:37.509728Z"} {"uuid": "3c3447a8-5b12-4f3d-8b96-10a3f87df1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82901", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhiltdqgj2m", "content": "Ultra Addons for Contact Form 7 \u22643.5.50 has a CRITICAL file upload vulnerability (CVSS 9.8). RCE possible if PDF Generator is enabled. Disable the module & monitor for updates. https://radar.offseq.com/threat/cve-2026-82901-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-themefic-ultra...", "creation_timestamp": "2026-09-27T00:00:37.509728Z"} https://vulnerability.circl.lu/sighting/3c3447a8-5b12-4f3d-8b96-10a3f87df1eb/export Sun, 27 Sep 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/78f17c39-4ebf-4d65-85d3-e340f5b8b75e/export {"uuid": "78f17c39-4ebf-4d65-85d3-e340f5b8b75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82901", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340060673817158", "content": "CVE-2026-82901: CRITICAL (CVSS 9.8) file upload vuln in Ultra Addons for Contact Form 7 (\u22643.5.50). RCE risk if PDF Generator enabled (off by default). Disable/monitor plugin & watch for patches. https://radar.offseq.com/threat/cve-2026-82901-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-themefic-ultra-addons-for-77a59cd90a3fbad1 #OffSeq #WordPress #Infosec #Vulnerability", "creation_timestamp": "2026-09-27T00:00:35.354307Z"} {"uuid": "78f17c39-4ebf-4d65-85d3-e340f5b8b75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82901", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340060673817158", "content": "CVE-2026-82901: CRITICAL (CVSS 9.8) file upload vuln in Ultra Addons for Contact Form 7 (\u22643.5.50). RCE risk if PDF Generator enabled (off by default). Disable/monitor plugin & watch for patches. https://radar.offseq.com/threat/cve-2026-82901-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-themefic-ultra-addons-for-77a59cd90a3fbad1 #OffSeq #WordPress #Infosec #Vulnerability", "creation_timestamp": "2026-09-27T00:00:35.354307Z"} https://vulnerability.circl.lu/sighting/78f17c39-4ebf-4d65-85d3-e340f5b8b75e/export Sun, 27 Sep 2026 00:00:35 +0000 https://vulnerability.circl.lu/sighting/676fcdc5-6b1a-411f-ae14-fd9ebbe8f3df/export {"uuid": "676fcdc5-6b1a-411f-ae14-fd9ebbe8f3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhhtmuimw2c", "content": "\ud83d\udd34 CVE-2026-82901 - Critical (9.8)\n\nThe Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82901/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T23:47:05.876682Z"} {"uuid": "676fcdc5-6b1a-411f-ae14-fd9ebbe8f3df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhhtmuimw2c", "content": "\ud83d\udd34 CVE-2026-82901 - Critical (9.8)\n\nThe Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82901/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T23:47:05.876682Z"} https://vulnerability.circl.lu/sighting/676fcdc5-6b1a-411f-ae14-fd9ebbe8f3df/export Sat, 26 Sep 2026 23:47:05 +0000 https://vulnerability.circl.lu/sighting/4256c7c0-6ed3-4dbd-9762-e51bd1b2581c/export {"uuid": "4256c7c0-6ed3-4dbd-9762-e51bd1b2581c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhdjzmyib26", "content": "CVE-2026-82901 - ultra addons for contact form 7\nThe Ultra Addons for Contact Form 7 plugin for WordPress can let anyone upload files to your server when its PDF Generator feature is turned on. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themefic #CVE #infosec", "creation_timestamp": "2026-09-26T22:30:07.380466Z"} {"uuid": "4256c7c0-6ed3-4dbd-9762-e51bd1b2581c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhdjzmyib26", "content": "CVE-2026-82901 - ultra addons for contact form 7\nThe Ultra Addons for Contact Form 7 plugin for WordPress can let anyone upload files to your server when its PDF Generator feature is turned on. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themefic #CVE #infosec", "creation_timestamp": "2026-09-26T22:30:07.380466Z"} https://vulnerability.circl.lu/sighting/4256c7c0-6ed3-4dbd-9762-e51bd1b2581c/export Sat, 26 Sep 2026 22:30:07 +0000 https://vulnerability.circl.lu/sighting/af1e4ee9-4ec7-4d89-9b84-1314b98a907b/export {"uuid": "af1e4ee9-4ec7-4d89-9b84-1314b98a907b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103477", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82901\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:12:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82901 PoC: WordPress Ultra Addons for Contact Form 7 \u22643.5.50 unauth file upload via signature field when PDF Generator is enabled \u2192 wp-content/uploads/uacf7-uploads/. Fix: 3.5.51+. https://pocbit.org/pocs/cve-2026-82901\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"} {"uuid": "af1e4ee9-4ec7-4d89-9b84-1314b98a907b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82901", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103477", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82901\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 21:12:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82901 PoC: WordPress Ultra Addons for Contact Form 7 \u22643.5.50 unauth file upload via signature field when PDF Generator is enabled \u2192 wp-content/uploads/uacf7-uploads/. Fix: 3.5.51+. https://pocbit.org/pocs/cve-2026-82901\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T22:00:08.000000Z"} https://vulnerability.circl.lu/sighting/af1e4ee9-4ec7-4d89-9b84-1314b98a907b/export Sat, 26 Sep 2026 22:00:08 +0000