https://vulnerability.circl.lu/sightings/feed 2026-08-12T06:55:47.575304+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0668055e-386c-4e8a-9dde-e76e770ab190/export 2026-08-12T06:55:47.606377+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0668055e-386c-4e8a-9dde-e76e770ab190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hkeyvempp3nox", "content": "CVE-2026-16032 - LWS Optimize\nCVE ID : CVE-2026-16032\n \n Published : Aug. 9, 2026, 6 a.m. | 27\u00a0minutes ago\n \n Description : The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it...", "creation_timestamp": "2026-08-09T06:49:51.505236Z"} 2026-08-09T06:49:51.505236+00:00 https://vulnerability.circl.lu/sighting/6b1015b7-c59a-4416-b37d-b79993f8e567/export 2026-08-12T06:55:47.610468+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6b1015b7-c59a-4416-b37d-b79993f8e567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16038", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mslgw5t3qc27", "content": "\ud83d\udd34 CVE-2026-16038 - Critical (9.1)\n\nThe MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gatew...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16038/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T16:00:28.637144Z"} 2026-08-08T16:00:28.637144+00:00 https://vulnerability.circl.lu/sighting/d320ffe5-9f97-4457-9f66-ddf1cbe89342/export 2026-08-12T06:55:47.610686+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d320ffe5-9f97-4457-9f66-ddf1cbe89342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16030", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mslgvx3m7r2u", "content": "\ud83d\udfe0 CVE-2026-16030 - High (8.1)\n\nThe MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16030/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T16:00:22.083912Z"} 2026-08-08T16:00:22.083912+00:00 https://vulnerability.circl.lu/sighting/e4edb15b-f060-42b3-9ce9-5fd89f572622/export 2026-08-12T06:55:47.610874+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e4edb15b-f060-42b3-9ce9-5fd89f572622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:36:28.380193Z"} 2026-08-07T10:36:28.380193+00:00 https://vulnerability.circl.lu/sighting/ee347736-beb7-4d7e-bffd-3ecdb4c35442/export 2026-08-12T06:55:47.611014+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ee347736-beb7-4d7e-bffd-3ecdb4c35442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16030", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117053405708747434", "content": "MStore API WordPress plugin (<4.21.0) hit by CRITICAL vuln (CVE-2026-16030): improper phone token checks enable account takeover, incl. admins. Restrict endpoints & monitor logins until patched. https://radar.offseq.com/threat/cve-2026-16030-cwe-287-improper-authentication-in-mstore-api-799def1fc3890a44 #OffSeq #WordPress #CVE2026_16030 #Vuln", "creation_timestamp": "2026-08-07T09:00:27.504055Z"} 2026-08-07T09:00:27.504055+00:00 https://vulnerability.circl.lu/sighting/518fdb31-0e61-493b-a5f9-c612905ca466/export 2026-08-12T06:55:47.611162+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "518fdb31-0e61-493b-a5f9-c612905ca466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:07.080076Z"} 2026-08-01T10:00:07.080076+00:00 https://vulnerability.circl.lu/sighting/02cfdd60-8e32-4a37-973b-8a44df2a372f/export 2026-08-12T06:55:47.611267+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "02cfdd60-8e32-4a37-973b-8a44df2a372f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:15:05.979043Z"} 2026-07-24T10:15:05.979043+00:00 https://vulnerability.circl.lu/sighting/8a5f810c-72f8-4e54-b660-f63a086a9ee9/export 2026-08-12T06:55:47.611371+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8a5f810c-72f8-4e54-b660-f63a086a9ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:07.892238Z"} 2026-07-07T10:15:07.892238+00:00 https://vulnerability.circl.lu/sighting/e8ecae61-8986-4867-8116-20c96b0175f2/export 2026-08-12T06:55:47.611470+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e8ecae61-8986-4867-8116-20c96b0175f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:00:05.803488Z"} 2026-06-30T10:00:05.803488+00:00 https://vulnerability.circl.lu/sighting/df4f16a9-ab87-448e-aa4f-2df7db73090a/export 2026-08-12T06:55:47.611569+00:00 Cédric Bonhomme https://cvepremium.circl.lu/user/cedric {"uuid": "df4f16a9-ab87-448e-aa4f-2df7db73090a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a73e833c-6418-47ef-88d9-a544f4dd3907", "content": "", "creation_timestamp": "2026-06-30T09:22:35.030433Z"} 2026-06-30T09:22:35.030433+00:00