https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 18:01:55 +0000 https://vulnerability.circl.lu/sighting/e79c5d06-9cda-472f-b409-2950835bac7d/export {"uuid": "e79c5d06-9cda-472f-b409-2950835bac7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1939", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mspisrcy632r", "content": "CVE-2024-1939 is trending. Hype score 2, currently #9 on cvemon.\n\nType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\nhttps://cvemon.intruder.io/cves/CVE-2024-1939", "creation_timestamp": "2026-08-10T06:45:00.773195Z"} {"uuid": "e79c5d06-9cda-472f-b409-2950835bac7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1939", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mspisrcy632r", "content": "CVE-2024-1939 is trending. Hype score 2, currently #9 on cvemon.\n\nType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\nhttps://cvemon.intruder.io/cves/CVE-2024-1939", "creation_timestamp": "2026-08-10T06:45:00.773195Z"} https://vulnerability.circl.lu/sighting/e79c5d06-9cda-472f-b409-2950835bac7d/export Mon, 10 Aug 2026 06:45:00 +0000 https://vulnerability.circl.lu/sighting/59c127e6-558a-45f1-8b70-33d77dcb5670/export {"uuid": "59c127e6-558a-45f1-8b70-33d77dcb5670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-1975", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"} {"uuid": "59c127e6-558a-45f1-8b70-33d77dcb5670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-1975", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"} https://vulnerability.circl.lu/sighting/59c127e6-558a-45f1-8b70-33d77dcb5670/export Thu, 19 Mar 2026 00:00:00 +0000 https://vulnerability.circl.lu/sighting/1f0484ae-9670-4654-b0aa-945852ab48a4/export {"uuid": "1f0484ae-9670-4654-b0aa-945852ab48a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1986", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12076", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1986\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7. This makes it possible for customer-level attackers, and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This is only exploitable when the user product upload functionality is enabled.\n\ud83d\udccf Published: 2024-03-07T20:33:26.566Z\n\ud83d\udccf Modified: 2025-04-16T15:51:53.554Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c9c2fb7f-a05b-4852-97eb-7befe880d703?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L322\n3. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L333\n4. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L132\n5. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L138\n6. https://booster.io/\n7. https://wordpress.org/plugins/woocommerce-jetpack/", "creation_timestamp": "2025-04-16T15:55:57.000000Z"} {"uuid": "1f0484ae-9670-4654-b0aa-945852ab48a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1986", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12076", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1986\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7. This makes it possible for customer-level attackers, and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This is only exploitable when the user product upload functionality is enabled.\n\ud83d\udccf Published: 2024-03-07T20:33:26.566Z\n\ud83d\udccf Modified: 2025-04-16T15:51:53.554Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c9c2fb7f-a05b-4852-97eb-7befe880d703?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L322\n3. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L333\n4. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L132\n5. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L138\n6. https://booster.io/\n7. https://wordpress.org/plugins/woocommerce-jetpack/", "creation_timestamp": "2025-04-16T15:55:57.000000Z"} https://vulnerability.circl.lu/sighting/1f0484ae-9670-4654-b0aa-945852ab48a4/export Wed, 16 Apr 2025 15:55:57 +0000 https://vulnerability.circl.lu/sighting/b6d5e5f3-7177-41cf-b9e1-5cd6acf9251a/export {"uuid": "b6d5e5f3-7177-41cf-b9e1-5cd6acf9251a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8987", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1905\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2024-04-29T06:00:01.340Z\n\ud83d\udccf Modified: 2025-03-26T20:55:41.470Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b9a448d2-4bc2-4933-8743-58c8768a619f/", "creation_timestamp": "2025-03-26T21:25:54.000000Z"} {"uuid": "b6d5e5f3-7177-41cf-b9e1-5cd6acf9251a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8987", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1905\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2024-04-29T06:00:01.340Z\n\ud83d\udccf Modified: 2025-03-26T20:55:41.470Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b9a448d2-4bc2-4933-8743-58c8768a619f/", "creation_timestamp": "2025-03-26T21:25:54.000000Z"} https://vulnerability.circl.lu/sighting/b6d5e5f3-7177-41cf-b9e1-5cd6acf9251a/export Wed, 26 Mar 2025 21:25:54 +0000 https://vulnerability.circl.lu/sighting/c79178b2-d3e1-48ae-b7d2-db1843c43bfd/export {"uuid": "c79178b2-d3e1-48ae-b7d2-db1843c43bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1964", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrzofie2c", "content": "", "creation_timestamp": "2025-02-11T02:18:15.871178Z"} {"uuid": "c79178b2-d3e1-48ae-b7d2-db1843c43bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1964", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrzofie2c", "content": "", "creation_timestamp": "2025-02-11T02:18:15.871178Z"} https://vulnerability.circl.lu/sighting/c79178b2-d3e1-48ae-b7d2-db1843c43bfd/export Tue, 11 Feb 2025 02:18:15 +0000 https://vulnerability.circl.lu/sighting/9557a881-0d81-45ea-be8f-999fdc08b323/export {"uuid": "9557a881-0d81-45ea-be8f-999fdc08b323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1944", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrxacwn23", "content": "", "creation_timestamp": "2025-02-11T02:18:13.368744Z"} {"uuid": "9557a881-0d81-45ea-be8f-999fdc08b323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1944", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrxacwn23", "content": "", "creation_timestamp": "2025-02-11T02:18:13.368744Z"} https://vulnerability.circl.lu/sighting/9557a881-0d81-45ea-be8f-999fdc08b323/export Tue, 11 Feb 2025 02:18:13 +0000 https://vulnerability.circl.lu/sighting/64e84e8d-efa9-4c6a-8dbf-7134ee9c4b19/export {"uuid": "64e84e8d-efa9-4c6a-8dbf-7134ee9c4b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1985", "type": "seen", "source": "Telegram/BK7vU0I6yfagEhXMrVTZB4ZUCw3752Z1EN6agKCE0RvRxSvG", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"} {"uuid": "64e84e8d-efa9-4c6a-8dbf-7134ee9c4b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1985", "type": "seen", "source": "Telegram/BK7vU0I6yfagEhXMrVTZB4ZUCw3752Z1EN6agKCE0RvRxSvG", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"} https://vulnerability.circl.lu/sighting/64e84e8d-efa9-4c6a-8dbf-7134ee9c4b19/export Thu, 06 Feb 2025 02:44:19 +0000 https://vulnerability.circl.lu/sighting/a7060499-2a02-487a-a229-e48ee556911b/export {"uuid": "a7060499-2a02-487a-a229-e48ee556911b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1991", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3575", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1991\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The RegistrationMagic \u2013 Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the update_users_role() function in all versions up to, and including, 5.3.0.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to escalate their privileges to that of an administrator\n\ud83d\udccf Published: 2024-04-09T21:31:59Z\n\ud83d\udccf Modified: 2025-01-31T03:32:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1991\n2. https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk//services/class_rm_user_services.php#L1205\n3. https://plugins.trac.wordpress.org/changeset/3049490/custom-registration-form-builder-with-submission-manager#file24\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/766e3966-157a-4db3-9179-813032343f76?source=cve", "creation_timestamp": "2025-01-31T04:13:06.000000Z"} {"uuid": "a7060499-2a02-487a-a229-e48ee556911b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1991", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3575", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1991\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The RegistrationMagic \u2013 Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the update_users_role() function in all versions up to, and including, 5.3.0.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to escalate their privileges to that of an administrator\n\ud83d\udccf Published: 2024-04-09T21:31:59Z\n\ud83d\udccf Modified: 2025-01-31T03:32:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1991\n2. https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk//services/class_rm_user_services.php#L1205\n3. https://plugins.trac.wordpress.org/changeset/3049490/custom-registration-form-builder-with-submission-manager#file24\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/766e3966-157a-4db3-9179-813032343f76?source=cve", "creation_timestamp": "2025-01-31T04:13:06.000000Z"} https://vulnerability.circl.lu/sighting/a7060499-2a02-487a-a229-e48ee556911b/export Fri, 31 Jan 2025 04:13:06 +0000 https://vulnerability.circl.lu/sighting/a958b283-f4fa-4c19-9c37-b0ca824c6605/export {"uuid": "a958b283-f4fa-4c19-9c37-b0ca824c6605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1947", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113549980676758562", "content": "", "creation_timestamp": "2024-11-26T15:33:23.922653Z"} {"uuid": "a958b283-f4fa-4c19-9c37-b0ca824c6605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1947", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113549980676758562", "content": "", "creation_timestamp": "2024-11-26T15:33:23.922653Z"} https://vulnerability.circl.lu/sighting/a958b283-f4fa-4c19-9c37-b0ca824c6605/export Tue, 26 Nov 2024 15:33:23 +0000 https://vulnerability.circl.lu/sighting/0130455c-bd81-4ca3-bc3a-0341afe191ef/export {"uuid": "0130455c-bd81-4ca3-bc3a-0341afe191ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1931", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8256", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-1931-reproduction\nURL\uff1ahttps://github.com/passer12/CVE-2024-1931-reproduction\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-13T14:11:37.000000Z"} {"uuid": "0130455c-bd81-4ca3-bc3a-0341afe191ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1931", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8256", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-1931-reproduction\nURL\uff1ahttps://github.com/passer12/CVE-2024-1931-reproduction\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-13T14:11:37.000000Z"} https://vulnerability.circl.lu/sighting/0130455c-bd81-4ca3-bc3a-0341afe191ef/export Tue, 13 Aug 2024 14:11:37 +0000