https://vulnerability.circl.lu/sightings/feed 2026-09-16T18:10:38.934346+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/694571f3-b6a9-403b-8407-3f094bda64a3/export 2026-09-16T18:10:38.966365+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "694571f3-b6a9-403b-8407-3f094bda64a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "Telegram/BjeVsXpYrNsRv6BrV8OD2OomoRwSN7YqQdY-9YF4AutvMEI", "content": "", "creation_timestamp": "2026-09-03T00:01:00.291581Z"} 2026-09-03T00:01:00.291581+00:00 https://vulnerability.circl.lu/sighting/d83be287-e0c1-462a-be52-34dac16ac04e/export 2026-09-16T18:10:38.969406+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d83be287-e0c1-462a-be52-34dac16ac04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "Telegram/BjeVsXpYrNsRv6BrV8OD2OomoRwSN7YqQdY-9YF4AutvMEI", "content": "", "creation_timestamp": "2026-09-02T01:00:05.098185Z"} 2026-09-02T01:00:05.098185+00:00 https://vulnerability.circl.lu/sighting/5497d1d7-e248-4d7a-b603-c8865ac975e9/export 2026-09-16T18:10:38.969548+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5497d1d7-e248-4d7a-b603-c8865ac975e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/485", "content": "python poc-CVE-2026-15748.py -f list.txt --upload\n\n\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557\n\u2551 CVE-2026-15748 - Forminator Forms Unauthenticated RCE \u2551\n\u2551 Crafted by Yora \u2551\n\u2551 FOR EDUCATIONAL & AUTHORIZED TESTING ONLY \u2551\n\u255a\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255d\n\n[*] Targets: 5\n[*] Threads: 8\n[*] Upload test: ON\n[*] Crawl depth: 2\n\n[INSTALLED (unknown version)] https://workerspoint.pl v1.55.1 (folder) [44 pages] [VULNERABLE] [93m[UPLOAD SKIP: no upload form]\n[INSTALLED (unknown version)] https://grprestige.online v1.57.1 (folder) [57 pages] [PATCHED] [93m[UPLOAD SKIP: no upload form]\n[NOT FOUND] https://webgatorsolutions.com v1.55.1 (html-source) [76 pages] [VULNERABLE] [UPLOAD SKIP: no upload form]\n[NOT FOUND] https://hafifbilgiler.com v1.57.1 (html-source) [102 pages] [PATCHED]\n[NOT FOUND] https://eau.gouv.tg v1.48.2 (html-source) [104 pages] [VULNERABLE] [93m[UPLOAD SKIP: no upload form]\n\n========== SUMMARY ==========\nVULNERABLE : 3\nPATCHED : 2\nUNKNOWN VERSION : 2\nNOT FOUND : 3\nNOT WORDPRESS : 0\nTOTAL SCANNED : 5\n[+] HAVE UPLOAD FORM: 0\n\n[+] Hasil detail disimpan \u2192 scan_results_detailed.txt", "creation_timestamp": "2026-08-26T00:00:08.692597Z"} 2026-08-26T00:00:08.692597+00:00 https://vulnerability.circl.lu/sighting/415f6c00-aedd-4a8e-8cce-af5e2c4ae9ec/export 2026-09-16T18:10:38.969681+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "415f6c00-aedd-4a8e-8cce-af5e2c4ae9ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "https://t.me/captainsmok3r_official/483", "content": "CVE-2026-15748 - Forminator Forms Unauthenticated RCE", "creation_timestamp": "2026-08-26T00:00:08.602349Z"} 2026-08-26T00:00:08.602349+00:00 https://vulnerability.circl.lu/sighting/b1bd981b-245f-468c-a39a-9b296043c951/export 2026-09-16T18:10:38.969785+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b1bd981b-245f-468c-a39a-9b296043c951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/484", "content": "", "creation_timestamp": "2026-08-26T00:00:08.572739Z"} 2026-08-26T00:00:08.572739+00:00 https://vulnerability.circl.lu/sighting/3384e7ee-d31f-4a8b-ad42-1a010b6f5093/export 2026-09-16T18:10:38.969881+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3384e7ee-d31f-4a8b-ad42-1a010b6f5093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/485", "content": "python poc-CVE-2026-15748.py -f list.txt --upload\n\n\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557\n\u2551 CVE-2026-15748 - Forminator Forms Unauthenticated RCE \u2551\n\u2551 Crafted by Yora \u2551\n\u2551 FOR EDUCATIONAL & AUTHORIZED TESTING ONLY \u2551\n\u255a\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255d\n\n[*] Targets: 5\n[*] Threads: 8\n[*] Upload test: ON\n[*] Crawl depth: 2\n\n[INSTALLED (unknown version)] https://workerspoint.pl v1.55.1 (folder) [44 pages] [VULNERABLE] [93m[UPLOAD SKIP: no upload form]\n[INSTALLED (unknown version)] https://grprestige.online v1.57.1 (folder) [57 pages] [PATCHED] [93m[UPLOAD SKIP: no upload form]\n[NOT FOUND] https://webgatorsolutions.com v1.55.1 (html-source) [76 pages] [VULNERABLE] [UPLOAD SKIP: no upload form]\n[NOT FOUND] https://hafifbilgiler.com v1.57.1 (html-source) [102 pages] [PATCHED]\n[NOT FOUND] https://eau.gouv.tg v1.48.2 (html-source) [104 pages] [VULNERABLE] [93m[UPLOAD SKIP: no upload form]\n\n========== SUMMARY ==========\nVULNERABLE : 3\nPATCHED : 2\nUNKNOWN VERSION : 2\nNOT FOUND : 3\nNOT WORDPRESS : 0\nTOTAL SCANNED : 5\n[+] HAVE UPLOAD FORM: 0\n\n[+] Hasil detail disimpan \u2192 scan_results_detailed.txt", "creation_timestamp": "2026-08-25T21:00:04.128722Z"} 2026-08-25T21:00:04.128722+00:00 https://vulnerability.circl.lu/sighting/b580dd2b-2eee-42e8-8a74-cbf8f9f92c5f/export 2026-09-16T18:10:38.969992+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b580dd2b-2eee-42e8-8a74-cbf8f9f92c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "https://t.me/captainsmok3r_official/483", "content": "CVE-2026-15748 - Forminator Forms Unauthenticated RCE", "creation_timestamp": "2026-08-25T21:00:04.035115Z"} 2026-08-25T21:00:04.035115+00:00 https://vulnerability.circl.lu/sighting/4009b273-77f0-457f-b139-a4fc24b7d482/export 2026-09-16T18:10:38.970090+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4009b273-77f0-457f-b139-a4fc24b7d482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/484", "content": "", "creation_timestamp": "2026-08-25T21:00:03.996070Z"} 2026-08-25T21:00:03.996070+00:00 https://vulnerability.circl.lu/sighting/dd65f4ec-7a12-4643-915d-25b43a45fe44/export 2026-09-16T18:10:38.970187+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd65f4ec-7a12-4643-915d-25b43a45fe44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "seen", "source": "https://t.me/information_security_channel/55760", "content": "300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw\nhttps://www.securityweek.com/300000-wordpress-sites-potentially-exposed-to-hacking-due-to-form-plugin-flaw/\n\nTracked as CVE-2026-15748, the arbitrary file upload bug allows unauthenticated attackers to upload executable files.\nThe post 300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw (https://www.securityweek.com/300000-wordpress-sites-potentially-exposed-to-hacking-due-to-form-plugin-flaw/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-24T00:00:09.331907Z"} 2026-08-24T00:00:09.331907+00:00 https://vulnerability.circl.lu/sighting/813c9a6d-c6f0-4c8d-bfe6-5f426a1aea9e/export 2026-09-16T18:10:38.970290+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "813c9a6d-c6f0-4c8d-bfe6-5f426a1aea9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15748", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9821", "content": "\ud83d\udea8 Forminator flaw can give unauthenticated attackers RCE.\n\nCVE-2026-15748 affects 600,000+ active WordPress installs. On susceptible forms, attackers can upload malicious PHP files and potentially take over the site.\n\nRead: https://thehackernews.com/2026/08/forminator-wordpress-flaw-can-enable.html", "creation_timestamp": "2026-08-24T00:00:04.336070Z"} 2026-08-24T00:00:04.336070+00:00