https://vulnerability.circl.lu/sightings/feed 2026-07-14T05:06:13.366719+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/53110688-28d7-4204-bea9-dfa0394e235d/export 2026-07-14T05:06:13.384982+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "53110688-28d7-4204-bea9-dfa0394e235d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljff5xdszd23", "content": "", "creation_timestamp": "2025-03-02T12:00:09.271089Z"} 2025-03-02T12:00:09.271089+00:00 https://vulnerability.circl.lu/sighting/d92b775c-03e1-491e-96c5-2ab5c098b374/export 2026-07-14T05:06:13.386891+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d92b775c-03e1-491e-96c5-2ab5c098b374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "Telegram/qjIgNQeGTScN_m0VyZq_r82aESVVehqNeqAStmxk6FmAK7WF", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"} 2025-03-02T11:46:31+00:00 https://vulnerability.circl.lu/sighting/6b1c12e0-ff2f-4ce2-af21-4cfbbda5ddfe/export 2026-07-14T05:06:13.386984+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6b1c12e0-ff2f-4ce2-af21-4cfbbda5ddfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "https://t.me/cvedetector/19218", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-1638 - Alloggio Membership for WordPress Authentication Bypass\", \n \"Content\": \"CVE ID : CVE-2025-1638 \nPublished : March 1, 2025, 8:15 a.m. | 31\u00a0minutes ago \nDescription : The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity through the alloggio_membership_init_rest_api_facebook_login and alloggio_membership_init_rest_api_google_login functions. This makes it possible for unauthenticated attackers to log in as any user, including administrators, without knowing a password. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"01 Mar 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:33.000000Z"} 2025-03-01T10:35:33+00:00 https://vulnerability.circl.lu/sighting/0d34841a-9871-4750-aac6-f442a87a19d8/export 2026-07-14T05:06:13.387060+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0d34841a-9871-4750-aac6-f442a87a19d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086542387303233", "content": "", "creation_timestamp": "2025-03-01T09:48:07.098669Z"} 2025-03-01T09:48:07.098669+00:00 https://vulnerability.circl.lu/sighting/699c4f74-d557-4c52-8f1e-78c3880102b6/export 2026-07-14T05:06:13.387126+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "699c4f74-d557-4c52-8f1e-78c3880102b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "Telegram/nu5zP1RQJMxhaQWBhFSOb3vErKKnFyrM4knJnup4yvdMGEw", "content": "", "creation_timestamp": "2025-03-01T09:00:53.000000Z"} 2025-03-01T09:00:53+00:00 https://vulnerability.circl.lu/sighting/0f018e13-514b-4787-9248-5d83b66b2043/export 2026-07-14T05:06:13.387193+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0f018e13-514b-4787-9248-5d83b66b2043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1638\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity through the alloggio_membership_init_rest_api_facebook_login and alloggio_membership_init_rest_api_google_login functions. This makes it possible for unauthenticated attackers to log in as any user, including administrators, without knowing a password.\n\ud83d\udccf Published: 2025-03-01T07:24:04.067Z\n\ud83d\udccf Modified: 2025-03-01T07:24:04.067Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/60405e54-e869-4623-892c-0821014f887b?source=cve\n2. https://themeforest.net/item/alloggio-hotel-booking-theme/26775539", "creation_timestamp": "2025-03-01T08:27:13.000000Z"} 2025-03-01T08:27:13+00:00