https://vulnerability.circl.lu/sightings/feed 2026-09-30T08:28:41.672879+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/60f06f0c-6245-4635-8441-a75275df32a6/export 2026-09-30T08:28:41.702943+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "60f06f0c-6245-4635-8441-a75275df32a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117321894451239766", "content": "CVE-2026-92229 Forminator Forms WordPress plugin, CVSS 9.1. Unauthenticated attackers can run arbitrary shortcodes on all versions up to 1.57.2. No patch yet. Disable the plugin or restrict access now. https://www.valtersit.com/cve/CVE-2026-92229/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-23T19:00:47.253161Z"} 2026-09-23T19:00:47.253161+00:00 https://vulnerability.circl.lu/sighting/6379e7de-946b-491e-8517-d90eac020664/export 2026-09-30T08:28:41.705164+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6379e7de-946b-491e-8517-d90eac020664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw7ggt2aij27", "content": "CVE-2026-92229 Forminator Forms WordPress plugin, CVSS 9.1. Unauthenticated attackers can run arbitrary shortcodes on all versions up to 1.57.2. No patch yet. Disable the plugin or restrict access now. https://www.valtersit.com/cve/CVE-2026-92229/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-23T19:00:43.614949Z"} 2026-09-23T19:00:43.614949+00:00 https://vulnerability.circl.lu/sighting/f23b63d9-cc01-4b20-b6f7-5679010ccb69/export 2026-09-30T08:28:41.705250+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f23b63d9-cc01-4b20-b6f7-5679010ccb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "published-proof-of-concept", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "content": "", "creation_timestamp": "2026-09-23T00:00:14.562191Z"} 2026-09-23T00:00:14.562191+00:00 https://vulnerability.circl.lu/sighting/4aa2c5a0-1069-443e-9b84-76ec73435e39/export 2026-09-30T08:28:41.705317+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4aa2c5a0-1069-443e-9b84-76ec73435e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "published-proof-of-concept", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "content": "", "creation_timestamp": "2026-09-23T00:00:12.849655Z"} 2026-09-23T00:00:12.849655+00:00 https://vulnerability.circl.lu/sighting/c02e979f-806e-4aec-b445-301e574b0f4e/export 2026-09-30T08:28:41.705383+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c02e979f-806e-4aec-b445-301e574b0f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "Telegram/BH3x7LFOYQ45thZpGfUbjH9k_Z5-lSceTabyhNzE0tdzuko", "content": "", "creation_timestamp": "2026-09-22T07:00:10.097483Z"} 2026-09-22T07:00:10.097483+00:00 https://vulnerability.circl.lu/sighting/61afc8f1-9656-408f-a4ce-8469e57de763/export 2026-09-30T08:28:41.705444+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "61afc8f1-9656-408f-a4ce-8469e57de763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "Telegram/5yYcJ8KxvxPc2wm8yAMZr4IlCi_IPgBAjiTQuvArbIBOcZs", "content": "", "creation_timestamp": "2026-09-22T07:00:07.822656Z"} 2026-09-22T07:00:07.822656+00:00 https://vulnerability.circl.lu/sighting/977a898a-2a4d-410d-91aa-beb38f05bf32/export 2026-09-30T08:28:41.705502+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "977a898a-2a4d-410d-91aa-beb38f05bf32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/wpsecurityninja.bsky.social/post/3mvzvo5xto42w", "content": "Forminator Forms \u22641.57.2 has an unauthenticated shortcode-execution hole (CVE-2026-92229). If you run quizzes or forms with it, update to 1.57.3 now. No login needed for the bad request.\n\npatchstack.com/database/wor...\n\n#WordPress #WordPressSecurity", "creation_timestamp": "2026-09-21T14:17:17.461846Z"} 2026-09-21T14:17:17.461846+00:00 https://vulnerability.circl.lu/sighting/23cfda1a-31d4-4e3b-ad98-e85f5d5da9ca/export 2026-09-30T08:28:41.705573+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "23cfda1a-31d4-4e3b-ad98-e85f5d5da9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvxsze5ckq2c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-92229: The The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcod\u2026\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-92229\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-20T18:24:31.995186Z"} 2026-09-20T18:24:31.995186+00:00 https://vulnerability.circl.lu/sighting/1dc2e2bc-fe26-4b2d-8859-697ebd771fab/export 2026-09-30T08:28:41.705639+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1dc2e2bc-fe26-4b2d-8859-697ebd771fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102802", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-92229\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-92229 \u2014 Forminator \u22641.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T22:00:04.656409Z"} 2026-09-19T22:00:04.656409+00:00 https://vulnerability.circl.lu/sighting/4a89aa89-2ff7-4e75-996b-46ce1918881f/export 2026-09-30T08:28:41.705701+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4a89aa89-2ff7-4e75-996b-46ce1918881f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvu5k5jzrh2k", "content": "\ud83d\udd34 CVE-2026-92229 - Critical (9.1)\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPres...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-92229/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:22:14.306937Z"} 2026-09-19T07:22:14.306937+00:00