<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-09T17:46:34.949961+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/87425741-3a59-4903-96f4-5649377d0b0b/export</id>
    <title>87425741-3a59-4903-96f4-5649377d0b0b</title>
    <updated>2026-07-09T17:46:34.968254+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "87425741-3a59-4903-96f4-5649377d0b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://t.me/brutsecurity/1014", "content": "CVE-2024-9634: RCE in GiveWP WordPress Plugin, 9.8 rating \ud83d\udd25\n\nAnother one critical vulnerability in GiveWP. This time, attackers can inject PHP code using one parameter.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/9tUYx\n\ud83d\udc49 Dork: http.body:\"plugins/give/assets/dist\"\n\nRead more: https://github.com/advisories/GHSA-6fx6-wrpf-cpgv", "creation_timestamp": "2026-07-09T03:00:12.348569Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/87425741-3a59-4903-96f4-5649377d0b0b/export"/>
    <published>2026-07-09T03:00:12.348569+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b881084e-edee-4c6e-aa34-490998f86d04/export</id>
    <title>b881084e-edee-4c6e-aa34-490998f86d04</title>
    <updated>2026-07-09T17:46:34.971015+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b881084e-edee-4c6e-aa34-490998f86d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moutxmleb72e", "content": "\ud83d\udccc CVE-2024-9634 - The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,... https://www.cyberhub.blog/cves/CVE-2024-9634", "creation_timestamp": "2026-06-22T12:07:07.066172Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b881084e-edee-4c6e-aa34-490998f86d04/export"/>
    <published>2026-06-22T12:07:07.066172+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/90d5cd87-1276-4b4f-9d82-3c6b3491e443/export</id>
    <title>90d5cd87-1276-4b4f-9d82-3c6b3491e443</title>
    <updated>2026-07-09T17:46:34.971151+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "90d5cd87-1276-4b4f-9d82-3c6b3491e443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://t.me/cvedetector/7992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-9634 - GiveWP PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-9634 \nPublished : Oct. 16, 2024, 2:15 a.m. | 44\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the give_company_name parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to achieve remote code execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T05:29:14.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/90d5cd87-1276-4b4f-9d82-3c6b3491e443/export"/>
    <published>2024-10-16T05:29:14+00:00</published>
  </entry>
</feed>
