<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T11:23:58.424729+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a97750e4-a400-4eca-bd65-2b459ec69115/export</id>
    <title>a97750e4-a400-4eca-bd65-2b459ec69115</title>
    <updated>2026-10-10T11:23:58.441501+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a97750e4-a400-4eca-bd65-2b459ec69115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39797", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvcsnqdh2z", "content": "CVE-2026-39797 - gdpr framework by data443\nThe GDPR Framework plugin for WordPress (versions up to 2.5.0) can be accessed by anyone on the internet and used to insert malicious data that may let an attacker execute code on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T21:30:05.778351Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a97750e4-a400-4eca-bd65-2b459ec69115/export"/>
    <published>2026-10-07T21:30:05.778351+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/084f2d7c-04d8-4476-867d-feb0f070ec0b/export</id>
    <title>084f2d7c-04d8-4476-867d-feb0f070ec0b</title>
    <updated>2026-10-10T11:23:58.444027+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "084f2d7c-04d8-4476-867d-feb0f070ec0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39797", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76t5vkkd2r", "content": "\ud83d\udea8 CVE-2026-39797 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in GDPR Framework By Data443 &amp;lt;= 2.5.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-39797\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:39.175383Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/084f2d7c-04d8-4476-867d-feb0f070ec0b/export"/>
    <published>2026-10-06T10:09:39.175383+00:00</published>
  </entry>
</feed>
