https://vulnerability.circl.lu/sightings/feed 2026-08-07T02:50:46.415565+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7602173e-5aa1-4c96-96ba-e4be5fed8906/export 2026-08-07T02:50:46.435755+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7602173e-5aa1-4c96-96ba-e4be5fed8906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "seen", "source": "https://t.me/cyberwarehouse/839", "content": "\ud83d\udea8 0-day Alert: Unpatched flaw threatens 100K+ WordPress sites\n\nA critical vulnerability (CVE-2025-47577, CVSS 10.0) in TI WooCommerce Wishlist lets unauthenticated attackers upload malicious files.\n\n\ud83d\udd17 Full details \u2192 https://thehackernews.com/2025/05/over-100000-wordpress-sites-at-risk.html", "creation_timestamp": "2026-07-27T00:00:30.199613Z"} 2026-07-27T00:00:30.199613+00:00 https://vulnerability.circl.lu/sighting/6e955d01-b40a-4b77-8910-562662611e56/export 2026-08-07T02:50:46.440096+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6e955d01-b40a-4b77-8910-562662611e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "seen", "source": "https://t.me/cyberwarehouse/839", "content": "\ud83d\udea8 0-day Alert: Unpatched flaw threatens 100K+ WordPress sites\n\nA critical vulnerability (CVE-2025-47577, CVSS 10.0) in TI WooCommerce Wishlist lets unauthenticated attackers upload malicious files.\n\n\ud83d\udd17 Full details \u2192 https://thehackernews.com/2025/05/over-100000-wordpress-sites-at-risk.html", "creation_timestamp": "2026-07-26T02:00:11.960015Z"} 2026-07-26T02:00:11.960015+00:00 https://vulnerability.circl.lu/sighting/ecac6a98-079b-405a-99e9-f2c80eb8fa49/export 2026-08-07T02:50:46.440215+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ecac6a98-079b-405a-99e9-f2c80eb8fa49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "seen", "source": "https://t.me/ZerodayAlert/512", "content": "\u0411\u043e\u043c\u0431\u0430 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f: \u0441\u0432\u044f\u0437\u043a\u0430 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u043d\u0430 WordPress \u0432\u0435\u0434\u0451\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0430\u0439\u0442\u0430\n\n\ud83d\udd27 \u041a\u043e\u0433\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0440\u0430\u0434\u0438 \u00ab\u0433\u0438\u0431\u043a\u043e\u0441\u0442\u0438\u00bb, \u043e\u043d\u0438, \u043f\u043e \u0441\u0443\u0442\u0438, \u0441\u0430\u043c\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u0432 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b . \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-47577 \u2014 \u0445\u0440\u0435\u0441\u0442\u043e\u043c\u0430\u0442\u0438\u0439\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440: \u043e\u0434\u043d\u0430 \u0441\u0442\u0440\u043e\u043a\u0430 \u043a\u043e\u0434\u0430, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 MIME-\u0442\u0438\u043f\u0430, \u0434\u0435\u043b\u0430\u0435\u0442 100 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432.\n\n\ud83d\udd0d \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u0435\u0441\u0448\u0443\u043c\u043d\u0430: \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0431\u0435\u0437 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439, \u0431\u0435\u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432. \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u2014 \u0432 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u043c \u0434\u043e\u0432\u0435\u0440\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u043c\u0438. \u041d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0436\u0438\u0434\u0430\u043b, \u0447\u0442\u043e Wishlist \u043f\u043e\u0439\u0434\u0451\u0442 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0438 \u044f\u0434\u0440\u0430, \u043d\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 WC Fields Factory \u043e\u043d\u0438 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043b\u0430\u0437\u0435\u0439\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u043b\u044c\u0437\u044f \u043f\u0440\u0438\u043a\u0440\u044b\u0442\u044c \u043d\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043d\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u26a1\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u2014 \u043d\u043e\u0432\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a \u043d\u0430 CMS. \u042d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e \u00ab\u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u00bb, \u0430 \u043f\u0440\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0441\u043b\u0430\u0431\u043e\u0441\u0442\u044c. \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0442\u0435\u043f\u0435\u0440\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043d\u0435 \u043e\u0442 \u0432\u0435\u0440\u0441\u0438\u0439, \u0430 \u043e\u0442 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0441 \u0447\u0435\u043c \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0432\u0430\u0448\u0435\u0439 \u0441\u0440\u0435\u0434\u0435.\n\n#wordpress #woocommerce #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:30.459119Z"} 2026-07-26T00:00:30.459119+00:00 https://vulnerability.circl.lu/sighting/b9f6c2f1-93f3-46ed-849b-13006a9727b0/export 2026-08-07T02:50:46.440330+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b9f6c2f1-93f3-46ed-849b-13006a9727b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "seen", "source": "https://t.me/ZerodayAlert/512", "content": "\u0411\u043e\u043c\u0431\u0430 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f: \u0441\u0432\u044f\u0437\u043a\u0430 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u043d\u0430 WordPress \u0432\u0435\u0434\u0451\u0442 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0430\u0439\u0442\u0430\n\n\ud83d\udd27 \u041a\u043e\u0433\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0440\u0430\u0434\u0438 \u00ab\u0433\u0438\u0431\u043a\u043e\u0441\u0442\u0438\u00bb, \u043e\u043d\u0438, \u043f\u043e \u0441\u0443\u0442\u0438, \u0441\u0430\u043c\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u0432 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b . \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-47577 \u2014 \u0445\u0440\u0435\u0441\u0442\u043e\u043c\u0430\u0442\u0438\u0439\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440: \u043e\u0434\u043d\u0430 \u0441\u0442\u0440\u043e\u043a\u0430 \u043a\u043e\u0434\u0430, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 MIME-\u0442\u0438\u043f\u0430, \u0434\u0435\u043b\u0430\u0435\u0442 100 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432.\n\n\ud83d\udd0d \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u0435\u0441\u0448\u0443\u043c\u043d\u0430: \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0431\u0435\u0437 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439, \u0431\u0435\u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432. \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u2014 \u0432 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u043c \u0434\u043e\u0432\u0435\u0440\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u043c\u0438. \u041d\u0438\u043a\u0442\u043e \u043d\u0435 \u043e\u0436\u0438\u0434\u0430\u043b, \u0447\u0442\u043e Wishlist \u043f\u043e\u0439\u0434\u0451\u0442 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u0438 \u044f\u0434\u0440\u0430, \u043d\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 WC Fields Factory \u043e\u043d\u0438 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043b\u0430\u0437\u0435\u0439\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u043b\u044c\u0437\u044f \u043f\u0440\u0438\u043a\u0440\u044b\u0442\u044c \u043d\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043d\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u26a1\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u2014 \u043d\u043e\u0432\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a \u043d\u0430 CMS. \u042d\u0442\u043e \u043d\u0435 \u043f\u0440\u043e \u00ab\u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u00bb, \u0430 \u043f\u0440\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0441\u043b\u0430\u0431\u043e\u0441\u0442\u044c. \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0442\u0435\u043f\u0435\u0440\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043d\u0435 \u043e\u0442 \u0432\u0435\u0440\u0441\u0438\u0439, \u0430 \u043e\u0442 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0441 \u0447\u0435\u043c \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0432\u0430\u0448\u0435\u0439 \u0441\u0440\u0435\u0434\u0435.\n\n#wordpress #woocommerce #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:13.128178Z"} 2026-07-25T15:00:13.128178+00:00 https://vulnerability.circl.lu/sighting/b6521689-af47-4bad-a7ec-3a1dcd0ca8e3/export 2026-08-07T02:50:46.440427+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b6521689-af47-4bad-a7ec-3a1dcd0ca8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1930", "content": "CVE-2025-47577: Unrestricted Upload of File with Dangerous Type in TI WooCommerce Wishlist Plugin, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nFailure to check the types of uploaded files allows attackers to upload a web shell to the server and perform RCE.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/jYyss\n\ud83d\udc49 Dork: http.body:\"plugins/ti-woocommerce-wishlist\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ti-woocommerce-wishlist/ti-woocommerce-wishlist-292-unauthenticated-arbitrary-file-upload", "creation_timestamp": "2026-07-12T00:00:49.604159Z"} 2026-07-12T00:00:49.604159+00:00 https://vulnerability.circl.lu/sighting/120b2a29-da2e-453b-a56d-1e83d71230a7/export 2026-08-07T02:50:46.440513+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "120b2a29-da2e-453b-a56d-1e83d71230a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1930", "content": "CVE-2025-47577: Unrestricted Upload of File with Dangerous Type in TI WooCommerce Wishlist Plugin, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nFailure to check the types of uploaded files allows attackers to upload a web shell to the server and perform RCE.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/jYyss\n\ud83d\udc49 Dork: http.body:\"plugins/ti-woocommerce-wishlist\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ti-woocommerce-wishlist/ti-woocommerce-wishlist-292-unauthenticated-arbitrary-file-upload", "creation_timestamp": "2026-07-11T13:00:05.562412Z"} 2026-07-11T13:00:05.562412+00:00 https://vulnerability.circl.lu/sighting/be48f68f-e9b0-460f-a937-166b5a72ef3f/export 2026-08-07T02:50:46.440599+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "be48f68f-e9b0-460f-a937-166b5a72ef3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "seen", "source": "https://t.me/brutsecurity/1930", "content": "CVE-2025-47577: Unrestricted Upload of File with Dangerous Type in TI WooCommerce Wishlist Plugin, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nFailure to check the types of uploaded files allows attackers to upload a web shell to the server and perform RCE.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/jYyss\n\ud83d\udc49 Dork: http.body:\"plugins/ti-woocommerce-wishlist\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ti-woocommerce-wishlist/ti-woocommerce-wishlist-292-unauthenticated-arbitrary-file-upload", "creation_timestamp": "2026-07-10T00:00:31.806817Z"} 2026-07-10T00:00:31.806817+00:00 https://vulnerability.circl.lu/sighting/0836ad2c-3c7b-4dda-96a1-d2b790d17e99/export 2026-08-07T02:50:46.440677+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0836ad2c-3c7b-4dda-96a1-d2b790d17e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "seen", "source": "https://t.me/brutsecurity/1930", "content": "CVE-2025-47577: Unrestricted Upload of File with Dangerous Type in TI WooCommerce Wishlist Plugin, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nFailure to check the types of uploaded files allows attackers to upload a web shell to the server and perform RCE.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/jYyss\n\ud83d\udc49 Dork: http.body:\"plugins/ti-woocommerce-wishlist\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ti-woocommerce-wishlist/ti-woocommerce-wishlist-292-unauthenticated-arbitrary-file-upload", "creation_timestamp": "2026-07-09T03:00:08.296316Z"} 2026-07-09T03:00:08.296316+00:00 https://vulnerability.circl.lu/sighting/458e2fb7-5968-41f6-b5ed-2f0c9bdcf96e/export 2026-08-07T02:50:46.440960+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "458e2fb7-5968-41f6-b5ed-2f0c9bdcf96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "seen", "source": "Telegram/NvmwrLZuJtk2OTgQzJD-RYjs9loCJaGTn1Suza32zcukTMWm1w", "content": "", "creation_timestamp": "2025-09-08T14:41:51.000000Z"} 2025-09-08T14:41:51+00:00 https://vulnerability.circl.lu/sighting/50e55d5f-c70b-4e14-821c-8625ecb3ba39/export 2026-08-07T02:50:46.441045+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "50e55d5f-c70b-4e14-821c-8625ecb3ba39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47577", "type": "published-proof-of-concept", "source": "Telegram/-7NL1bzu3gPFP7kRRcfqD7SNyl8Wx0VR-ImR3UVLeO60Co5fXQ", "content": "", "creation_timestamp": "2025-09-07T22:50:58.000000Z"} 2025-09-07T22:50:58+00:00