https://vulnerability.circl.lu/sightings/feed 2026-07-18T21:16:17.828170+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/98aa64b2-46b5-4830-95dc-47ef28a833fa/export 2026-07-18T21:16:17.851067+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "98aa64b2-46b5-4830-95dc-47ef28a833fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqtd3hngxz2u", "content": "CVE-2026-12393 - WPS Bookings for WooCommerce\nCVE ID : CVE-2026-12393\n \n Published : July 17, 2026, 7:16 a.m. | 20\u00a0minutes ago\n \n Description : The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user b...", "creation_timestamp": "2026-07-17T08:22:47.011252Z"} 2026-07-17T08:22:47.011252+00:00 https://vulnerability.circl.lu/sighting/a8c62544-e503-4b3a-b169-ae9255e0cc67/export 2026-07-18T21:16:17.853678+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a8c62544-e503-4b3a-b169-ae9255e0cc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12391", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqrgiqg5c22e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-12391](https://ubuntu.com/security/CVE-2026-12391)\nAn insecure symlink following vulner...\nhttps://ubuntu.com/security/CVE-2026-12391 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-16T14:18:33.167305Z"} 2026-07-16T14:18:33.167305+00:00 https://vulnerability.circl.lu/sighting/3949607d-d2c7-4418-91f5-d99a8871a25a/export 2026-07-18T21:16:17.853882+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3949607d-d2c7-4418-91f5-d99a8871a25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqsfnohs22", "content": "CVE-2026-12395 - WP Job Portal\nCVE ID : CVE-2026-12395\n \n Published : July 16, 2026, 7:16 a.m. | 18\u00a0minutes ago\n \n Description : The WP Job Portal WordPress plugin before 2.5.5 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authentic...", "creation_timestamp": "2026-07-16T07:50:15.640854Z"} 2026-07-16T07:50:15.640854+00:00 https://vulnerability.circl.lu/sighting/4e9bfeb3-9e6b-42b2-8250-a7d33dd90ed7/export 2026-07-18T21:16:17.854032+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4e9bfeb3-9e6b-42b2-8250-a7d33dd90ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12396", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlachztqa2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12396 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Job Portal: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DCF6826A-910B-460F-8C5C-9194DBD08102", "creation_timestamp": "2026-07-14T03:11:42.322235Z"} 2026-07-14T03:11:42.322235+00:00 https://vulnerability.circl.lu/sighting/cd9dd930-8081-4fe1-bc89-adf72031a1db/export 2026-07-18T21:16:17.854174+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cd9dd930-8081-4fe1-bc89-adf72031a1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12396", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqklk2ngxy26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12396 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Job Portal: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D4CD6FD9-ED13-4441-887C-426DDD6BA6EE", "creation_timestamp": "2026-07-13T21:00:07.967907Z"} 2026-07-13T21:00:07.967907+00:00 https://vulnerability.circl.lu/sighting/0da3d798-2399-45a0-81ce-912b740602e7/export 2026-07-18T21:16:17.854331+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0da3d798-2399-45a0-81ce-912b740602e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12396", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6xam3rs2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12396 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Job Portal: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1EAC575E-34FC-48AE-A44B-ECF331AA7BAE", "creation_timestamp": "2026-07-13T07:42:12.193332Z"} 2026-07-13T07:42:12.193332+00:00 https://vulnerability.circl.lu/sighting/26ab9247-9b9e-48b6-8a0d-860286a81c24/export 2026-07-18T21:16:17.854481+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "26ab9247-9b9e-48b6-8a0d-860286a81c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12397", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6ostdds2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12397 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WP Job Portal: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0694E057-7C2C-4FC2-BC72-C3E69140ACD0", "creation_timestamp": "2026-07-13T07:37:29.051337Z"} 2026-07-13T07:37:29.051337+00:00 https://vulnerability.circl.lu/sighting/029057ee-b0af-473d-aec6-ddcc8132b176/export 2026-07-18T21:16:17.854627+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "029057ee-b0af-473d-aec6-ddcc8132b176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1239", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mplig3lr5o27", "content": "CVE-2026-1239 - Missing Authorization in Ninja Forms plugin for WordPress. Unauthenticated access to form submissions, potentially exposing sensitive data. CVSS 7.5. Update immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-1239/", "creation_timestamp": "2026-07-01T12:11:45.328513Z"} 2026-07-01T12:11:45.328513+00:00 https://vulnerability.circl.lu/sighting/bc053091-71d7-44b2-aaf4-9b3e16632696/export 2026-07-18T21:16:17.854770+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bc053091-71d7-44b2-aaf4-9b3e16632696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12399", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpbu7ixrta2m", "content": "CVE-2026-12399 gutenverse (CVSS Score 4.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-27T16:16:08.366941Z"} 2026-06-27T16:16:08.366941+00:00 https://vulnerability.circl.lu/sighting/e5cbeef0-c81f-4a9f-8c55-6ef607fb1453/export 2026-07-18T21:16:17.854905+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e5cbeef0-c81f-4a9f-8c55-6ef607fb1453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpbaloxhgt2q", "content": "CVE-2026-12399 - Gutenverse\nCVE ID : CVE-2026-12399\n \n Published : June 27, 2026, 6:50 a.m. | 2\u00a0hours, 54\u00a0minutes ago\n \n Description : The Gutenverse \u2013 WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin ...", "creation_timestamp": "2026-06-27T10:25:02.284721Z"} 2026-06-27T10:25:02.284721+00:00