https://vulnerability.circl.lu/sightings/feed 2026-07-05T04:28:14.073687+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ac06e1dc-13e9-4218-8271-ac92d0191de4/export 2026-07-05T04:28:14.093520+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ac06e1dc-13e9-4218-8271-ac92d0191de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9148", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mpubgmlrvk2r", "content": "CVE-2026-9148. wpDiscuz up to 7.6.56. Stored XSS via website field. Attacker injects malicious code. Runs on every page load. Steals admin sessions. No patch available. Disable the plugin now.\n\nScan: pulse-wp.com\n#WordPress #XSS #CyberSecurity", "creation_timestamp": "2026-07-05T00:00:40.706883Z"} 2026-07-05T00:00:40.706883+00:00 https://vulnerability.circl.lu/sighting/06e54c53-770a-46fc-b2cd-70607c2a3bad/export 2026-07-05T04:28:14.095607+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "06e54c53-770a-46fc-b2cd-70607c2a3bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9148", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprmbsnnoe2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-9148 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 wpDiscuz: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress\n\n\n\nhttps://kripta.biz/posts/EA7CB820-253D-48CB-BE88-EAD2760097EB", "creation_timestamp": "2026-07-03T22:36:52.034519Z"} 2026-07-03T22:36:52.034519+00:00 https://vulnerability.circl.lu/sighting/83d164e5-5e2c-4f63-a721-6b52a69b1e0a/export 2026-07-05T04:28:14.095703+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "83d164e5-5e2c-4f63-a721-6b52a69b1e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9148", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpr5plilnz2m", "content": "CVE-2026-9148 wpdiscuz (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-03T18:16:07.474272Z"} 2026-07-03T18:16:07.474272+00:00 https://vulnerability.circl.lu/sighting/ad26b638-df66-4a8b-9665-9a5fc0437e6f/export 2026-07-05T04:28:14.095776+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ad26b638-df66-4a8b-9665-9a5fc0437e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqbiygs5w2n", "content": "CVE-2026-9148 - Comments\nCVE ID : CVE-2026-9148\n \n Published : July 3, 2026, 6:50 a.m. | 2\u00a0hours, 57\u00a0minutes ago\n \n Description : The Comments \u2013 wpDiscuz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the guest commenter 'Website' field in versions up to...", "creation_timestamp": "2026-07-03T09:51:21.611129Z"} 2026-07-03T09:51:21.611129+00:00