https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:36:13 +0000 https://vulnerability.circl.lu/sighting/be83fce5-dd03-4b02-b170-4ac7ab6785a6/export {"uuid": "be83fce5-dd03-4b02-b170-4ac7ab6785a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117349299413510599", "content": "CVE-2026-94504: Ninja Forms 3.15.3 stored XSS, CVSS 7.2. Attacker script runs in WordPress admin origin. No patch yet - restrict submission access and watch vendor advisories. https://www.valtersit.com/cve/CVE-2026-94504/ #CVE #infosec #WordPress", "creation_timestamp": "2026-09-28T15:10:21.700819Z"} {"uuid": "be83fce5-dd03-4b02-b170-4ac7ab6785a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117349299413510599", "content": "CVE-2026-94504: Ninja Forms 3.15.3 stored XSS, CVSS 7.2. Attacker script runs in WordPress admin origin. No patch yet - restrict submission access and watch vendor advisories. https://www.valtersit.com/cve/CVE-2026-94504/ #CVE #infosec #WordPress", "creation_timestamp": "2026-09-28T15:10:21.700819Z"} https://vulnerability.circl.lu/sighting/be83fce5-dd03-4b02-b170-4ac7ab6785a6/export Mon, 28 Sep 2026 15:10:21 +0000 https://vulnerability.circl.lu/sighting/f6b3fc8a-57b9-48ef-b01e-e2d23814b6ba/export {"uuid": "f6b3fc8a-57b9-48ef-b01e-e2d23814b6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwlle6zoxd2g", "content": "CVE-2026-94504: Ninja Forms 3.15.3 stored XSS, CVSS 7.2. Attacker script runs in WordPress admin origin. No patch yet - restrict submission access and watch vendor advisories. https://www.valtersit.com/cve/CVE-2026-94504/ #CVE #infosec #WordPress", "creation_timestamp": "2026-09-28T15:00:41.680507Z"} {"uuid": "f6b3fc8a-57b9-48ef-b01e-e2d23814b6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwlle6zoxd2g", "content": "CVE-2026-94504: Ninja Forms 3.15.3 stored XSS, CVSS 7.2. Attacker script runs in WordPress admin origin. No patch yet - restrict submission access and watch vendor advisories. https://www.valtersit.com/cve/CVE-2026-94504/ #CVE #infosec #WordPress", "creation_timestamp": "2026-09-28T15:00:41.680507Z"} https://vulnerability.circl.lu/sighting/f6b3fc8a-57b9-48ef-b01e-e2d23814b6ba/export Mon, 28 Sep 2026 15:00:41 +0000 https://vulnerability.circl.lu/sighting/86755cbe-a830-43be-94f2-d729322734fb/export {"uuid": "86755cbe-a830-43be-94f2-d729322734fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "Telegram/cjlcZTFFUyGrwljsqQ_tJDhKhIyBt5_Ycl19FfJ_ZRz-oCM", "content": "", "creation_timestamp": "2026-09-24T09:00:04.000000Z"} {"uuid": "86755cbe-a830-43be-94f2-d729322734fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "Telegram/cjlcZTFFUyGrwljsqQ_tJDhKhIyBt5_Ycl19FfJ_ZRz-oCM", "content": "", "creation_timestamp": "2026-09-24T09:00:04.000000Z"} https://vulnerability.circl.lu/sighting/86755cbe-a830-43be-94f2-d729322734fb/export Thu, 24 Sep 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/8d2968b4-573a-4fd2-9673-0164e2e87bdb/export {"uuid": "8d2968b4-573a-4fd2-9673-0164e2e87bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "published-proof-of-concept", "source": "Telegram/cjlcZTFFUyGrwljsqQ_tJDhKhIyBt5_Ycl19FfJ_ZRz-oCM", "content": "", "creation_timestamp": "2026-09-24T09:00:04.000000Z"} {"uuid": "8d2968b4-573a-4fd2-9673-0164e2e87bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "published-proof-of-concept", "source": "Telegram/cjlcZTFFUyGrwljsqQ_tJDhKhIyBt5_Ycl19FfJ_ZRz-oCM", "content": "", "creation_timestamp": "2026-09-24T09:00:04.000000Z"} https://vulnerability.circl.lu/sighting/8d2968b4-573a-4fd2-9673-0164e2e87bdb/export Thu, 24 Sep 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/a3f51bdc-ca1a-492a-be4d-3a9b4628d37c/export {"uuid": "a3f51bdc-ca1a-492a-be4d-3a9b4628d37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://t.me/GithubRedTeam/103183", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-94504\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 01:37:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNinja Forms unauth stored XSS POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T02:00:12.000000Z"} {"uuid": "a3f51bdc-ca1a-492a-be4d-3a9b4628d37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://t.me/GithubRedTeam/103183", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-94504\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 01:37:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNinja Forms unauth stored XSS POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T02:00:12.000000Z"} https://vulnerability.circl.lu/sighting/a3f51bdc-ca1a-492a-be4d-3a9b4628d37c/export Thu, 24 Sep 2026 02:00:12 +0000 https://vulnerability.circl.lu/sighting/8b2c9e70-1a2d-4e8f-8aa7-15ef02748378/export {"uuid": "8b2c9e70-1a2d-4e8f-8aa7-15ef02748378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103183", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-94504\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 01:37:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNinja Forms unauth stored XSS POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T02:00:12.000000Z"} {"uuid": "8b2c9e70-1a2d-4e8f-8aa7-15ef02748378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103183", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-94504\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cflowsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 01:37:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNinja Forms unauth stored XSS POC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-24T02:00:12.000000Z"} https://vulnerability.circl.lu/sighting/8b2c9e70-1a2d-4e8f-8aa7-15ef02748378/export Thu, 24 Sep 2026 02:00:12 +0000 https://vulnerability.circl.lu/sighting/d5ee0b6c-fc86-4ac0-b71e-a9d110b5fd3d/export {"uuid": "d5ee0b6c-fc86-4ac0-b71e-a9d110b5fd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bv3gfivokqwwm", "content": "CVE-2026-94504 - Ninja Forms \u2013 The Contact Form Builder That Grows With You\nCVE ID : CVE-2026-94504\n \n Published : Sept. 22, 2026, 6:39 a.m. | 39\u00a0minutes ago\n \n Description : Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encodin...", "creation_timestamp": "2026-09-22T07:44:46.508949Z"} {"uuid": "d5ee0b6c-fc86-4ac0-b71e-a9d110b5fd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bv3gfivokqwwm", "content": "CVE-2026-94504 - Ninja Forms \u2013 The Contact Form Builder That Grows With You\nCVE ID : CVE-2026-94504\n \n Published : Sept. 22, 2026, 6:39 a.m. | 39\u00a0minutes ago\n \n Description : Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encodin...", "creation_timestamp": "2026-09-22T07:44:46.508949Z"} https://vulnerability.circl.lu/sighting/d5ee0b6c-fc86-4ac0-b71e-a9d110b5fd3d/export Tue, 22 Sep 2026 07:44:46 +0000