<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 09 Jul 2026 17:46:36 +0000</lastBuildDate>
    <item>
      <title>87425741-3a59-4903-96f4-5649377d0b0b</title>
      <link>https://vulnerability.circl.lu/sighting/87425741-3a59-4903-96f4-5649377d0b0b/export</link>
      <description>{"uuid": "87425741-3a59-4903-96f4-5649377d0b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://t.me/brutsecurity/1014", "content": "CVE-2024-9634: RCE in GiveWP WordPress Plugin, 9.8 rating \ud83d\udd25\n\nAnother one critical vulnerability in GiveWP. This time, attackers can inject PHP code using one parameter.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/9tUYx\n\ud83d\udc49 Dork: http.body:\"plugins/give/assets/dist\"\n\nRead more: https://github.com/advisories/GHSA-6fx6-wrpf-cpgv", "creation_timestamp": "2026-07-09T03:00:12.348569Z"}</description>
      <content:encoded>{"uuid": "87425741-3a59-4903-96f4-5649377d0b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://t.me/brutsecurity/1014", "content": "CVE-2024-9634: RCE in GiveWP WordPress Plugin, 9.8 rating \ud83d\udd25\n\nAnother one critical vulnerability in GiveWP. This time, attackers can inject PHP code using one parameter.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/9tUYx\n\ud83d\udc49 Dork: http.body:\"plugins/give/assets/dist\"\n\nRead more: https://github.com/advisories/GHSA-6fx6-wrpf-cpgv", "creation_timestamp": "2026-07-09T03:00:12.348569Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/87425741-3a59-4903-96f4-5649377d0b0b/export</guid>
      <pubDate>Thu, 09 Jul 2026 03:00:12 +0000</pubDate>
    </item>
    <item>
      <title>b881084e-edee-4c6e-aa34-490998f86d04</title>
      <link>https://vulnerability.circl.lu/sighting/b881084e-edee-4c6e-aa34-490998f86d04/export</link>
      <description>{"uuid": "b881084e-edee-4c6e-aa34-490998f86d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moutxmleb72e", "content": "\ud83d\udccc CVE-2024-9634 - The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,... https://www.cyberhub.blog/cves/CVE-2024-9634", "creation_timestamp": "2026-06-22T12:07:07.066172Z"}</description>
      <content:encoded>{"uuid": "b881084e-edee-4c6e-aa34-490998f86d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moutxmleb72e", "content": "\ud83d\udccc CVE-2024-9634 - The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,... https://www.cyberhub.blog/cves/CVE-2024-9634", "creation_timestamp": "2026-06-22T12:07:07.066172Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b881084e-edee-4c6e-aa34-490998f86d04/export</guid>
      <pubDate>Mon, 22 Jun 2026 12:07:07 +0000</pubDate>
    </item>
    <item>
      <title>90d5cd87-1276-4b4f-9d82-3c6b3491e443</title>
      <link>https://vulnerability.circl.lu/sighting/90d5cd87-1276-4b4f-9d82-3c6b3491e443/export</link>
      <description>{"uuid": "90d5cd87-1276-4b4f-9d82-3c6b3491e443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://t.me/cvedetector/7992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-9634 - GiveWP PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-9634 \nPublished : Oct. 16, 2024, 2:15 a.m. | 44\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the give_company_name parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to achieve remote code execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T05:29:14.000000Z"}</description>
      <content:encoded>{"uuid": "90d5cd87-1276-4b4f-9d82-3c6b3491e443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9634", "type": "seen", "source": "https://t.me/cvedetector/7992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-9634 - GiveWP PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-9634 \nPublished : Oct. 16, 2024, 2:15 a.m. | 44\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.16.3 via deserialization of untrusted input from the give_company_name parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to achieve remote code execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T05:29:14.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/90d5cd87-1276-4b4f-9d82-3c6b3491e443/export</guid>
      <pubDate>Wed, 16 Oct 2024 05:29:14 +0000</pubDate>
    </item>
  </channel>
</rss>
