https://vulnerability.circl.lu/sightings/feed 2026-10-08T09:39:51.572231+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/01cdb604-0038-4939-bdac-3057dbf1dd8f/export 2026-10-08T09:39:51.604703+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "01cdb604-0038-4939-bdac-3057dbf1dd8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/VulnerabilityNews/44315", "content": "Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\n\nThe high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability appeared first on SecurityWeek.\nhttps://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/", "creation_timestamp": "2026-09-18T12:00:05.674579Z"} 2026-09-18T12:00:05.674579+00:00 https://vulnerability.circl.lu/sighting/a64d748d-1453-4cd6-ae00-fd1cf62760c7/export 2026-10-08T09:39:51.606645+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a64d748d-1453-4cd6-ae00-fd1cf62760c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101638", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-AIOWPM-CVE-2026-19949\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 686f6c61\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-08 09:57:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <= 7.109 via regex de replace_table_values. Laboratorio Docker + payload derivado (leak de ai1wm_secret_key por REST anonima) + RCE con importacion anonima.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:50.662488Z"} 2026-09-10T00:00:50.662488+00:00 https://vulnerability.circl.lu/sighting/3f03068d-4b39-48e5-bd58-15b6a3b09885/export 2026-10-08T09:39:51.606796+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3f03068d-4b39-48e5-bd58-15b6a3b09885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/GithubRedTeam/101638", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-AIOWPM-CVE-2026-19949\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 686f6c61\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-08 09:57:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <= 7.109 via regex de replace_table_values. Laboratorio Docker + payload derivado (leak de ai1wm_secret_key por REST anonima) + RCE con importacion anonima.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:05.492194Z"} 2026-09-09T05:00:05.492194+00:00 https://vulnerability.circl.lu/sighting/305e97f0-6b74-4526-abb0-d3f57006c068/export 2026-10-08T09:39:51.606920+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "305e97f0-6b74-4526-abb0-d3f57006c068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/yuT2NAUY-P_iQf71KZdH7THqaqJP0LaiU2b3FS1yHkoYVfk", "content": "", "creation_timestamp": "2026-09-09T00:00:29.722943Z"} 2026-09-09T00:00:29.722943+00:00 https://vulnerability.circl.lu/sighting/a5a07ba4-bad9-4d86-b3d5-af095a657000/export 2026-10-08T09:39:51.607027+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a5a07ba4-bad9-4d86-b3d5-af095a657000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "Telegram/yuT2NAUY-P_iQf71KZdH7THqaqJP0LaiU2b3FS1yHkoYVfk", "content": "", "creation_timestamp": "2026-09-08T12:00:04.323575Z"} 2026-09-08T12:00:04.323575+00:00 https://vulnerability.circl.lu/sighting/157ce5f7-1c46-42d5-b79e-62d81a0efb6c/export 2026-10-08T09:39:51.607122+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "157ce5f7-1c46-42d5-b79e-62d81a0efb6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/xe964jSyuZ2TO2raaooyZjlU2hWxY5G_P4QQhWoWmWghG0E", "content": "", "creation_timestamp": "2026-09-06T18:00:05.722471Z"} 2026-09-06T18:00:05.722471+00:00 https://vulnerability.circl.lu/sighting/c5fcec69-4ed0-4cb2-bd97-c3c7f3ed7c33/export 2026-10-08T09:39:51.607211+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c5fcec69-4ed0-4cb2-bd97-c3c7f3ed7c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3musx66t6ea2b", "content": "All-in-One WP Migration Flaw Hits 3M WordPress Sites \u2014 Unauthenticated SQL injection in All-in-One WP Migration and\u2026 https://0daynews.com/articles/2026-09-04-all-in-one-wp-migration-cve-2026-19949-sql-injection?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-963", "creation_timestamp": "2026-09-06T02:30:19.058117Z"} 2026-09-06T02:30:19.058117+00:00 https://vulnerability.circl.lu/sighting/51aba456-d7a6-4f8f-baa7-1314f059cded/export 2026-10-08T09:39:51.607319+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "51aba456-d7a6-4f8f-baa7-1314f059cded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3murkqw3x532c", "content": "All-in-One WP Migration Flaw Hits 3M WordPress Sites https://0daynews.com/articles/2026-09-04-all-in-one-wp-migration-cve-2026-19949-sql-injection", "creation_timestamp": "2026-09-05T13:15:29.640920Z"} 2026-09-05T13:15:29.640920+00:00 https://vulnerability.circl.lu/sighting/725e59de-4bc2-4096-a828-ab6b70bf92de/export 2026-10-08T09:39:51.607417+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "725e59de-4bc2-4096-a828-ab6b70bf92de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mupt25aosk2u", "content": "CVE-2026-19949\u3001\u6570\u767e\u4e07\u4ef6\u306eWordPress\u30b5\u30a4\u30c8\u304c\u8106\u5f31\u306a\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u7a3c\u50cd\u4e2d\n\n\u672c\u6765\u306f\u30b5\u30a4\u30c8\u306e\u30c8\u30e9\u30d6\u30eb\u5fa9\u65e7\u3092\u52a9\u3051\u308b\u306f\u305a\u306eWordPress\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30c4\u30fc\u30eb\u304c\u3001\u9006\u306b\u653b\u6483\u306e\u5f15\u304d\u91d1\u306b\u306a\u308a\u304b\u306d\u306a\u3044\u72b6\u6cc1\u3067\u3059\u3002 \u7814\u7a76\u8005\u3089\u306f\u3001All-in-One WP Migration and Backup\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f37.109\u4ee5\u524d\u306b\u5f71\u97ff\u3059\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u6b20\u9665...", "creation_timestamp": "2026-09-04T20:38:29.906525Z"} 2026-09-04T20:38:29.906525+00:00 https://vulnerability.circl.lu/sighting/cac0f9b1-4739-4a46-aba6-545c531825cd/export 2026-10-08T09:39:51.607515+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cac0f9b1-4739-4a46-aba6-545c531825cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mup4rrryzh2l", "content": "\ud83d\udce2 Injection SQL de second ordre non authentifi\u00e9e dans All-in-One WP Migration and Backup (CVE-2026-19949)\n\nCet article d\u00e9taille une vuln\u00e9rabilit\u00e9 critique d\u00e9couverte le 14 ao\u00fbt 2026 dans le plugin WordPress All-in-One\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#WordPress #RemoteCodeExecution #Cyberveille", "creation_timestamp": "2026-09-04T14:00:07.438634Z"} 2026-09-04T14:00:07.438634+00:00