<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 21:28:52 +0000</lastBuildDate>
    <item>
      <title>076c690c-2112-4351-97f2-3bfc40702a8f</title>
      <link>https://vulnerability.circl.lu/sighting/076c690c-2112-4351-97f2-3bfc40702a8f/export</link>
      <description>{"uuid": "076c690c-2112-4351-97f2-3bfc40702a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103694", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxlzfphqjx2x", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cMobile builder\u300dv1.4.2\u4ee5\u524d\u306f\u3001\u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u30fc\u304cREST API\u7d4c\u7531\u3067\u30e6\u30fc\u30b6\u30fc\u30e1\u30bf\u30ad\u30fc\u3092\u66f4\u65b0\u3067\u304d\u308b\u5236\u9650\u304c\u4e0d\u5341\u5206\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u4e00\u822c\u30e6\u30fc\u30b6\u30fc\u304c\u81ea\u8eab\u3092\u7ba1\u2026\nCVE-2026-103694 CVSS 8.8 | HIGH", "creation_timestamp": "2026-10-11T12:37:15.485034Z"}</description>
      <content:encoded>{"uuid": "076c690c-2112-4351-97f2-3bfc40702a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103694", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxlzfphqjx2x", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cMobile builder\u300dv1.4.2\u4ee5\u524d\u306f\u3001\u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u30fc\u304cREST API\u7d4c\u7531\u3067\u30e6\u30fc\u30b6\u30fc\u30e1\u30bf\u30ad\u30fc\u3092\u66f4\u65b0\u3067\u304d\u308b\u5236\u9650\u304c\u4e0d\u5341\u5206\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u4e00\u822c\u30e6\u30fc\u30b6\u30fc\u304c\u81ea\u8eab\u3092\u7ba1\u2026\nCVE-2026-103694 CVSS 8.8 | HIGH", "creation_timestamp": "2026-10-11T12:37:15.485034Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/076c690c-2112-4351-97f2-3bfc40702a8f/export</guid>
      <pubDate>Sun, 11 Oct 2026 12:37:15 +0000</pubDate>
    </item>
    <item>
      <title>02048f85-e1b5-4de0-9f9b-1744544567d6</title>
      <link>https://vulnerability.circl.lu/sighting/02048f85-e1b5-4de0-9f9b-1744544567d6/export</link>
      <description>{"uuid": "02048f85-e1b5-4de0-9f9b-1744544567d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103694", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420845968693297", "content": "CVE-2026-103694 Mobile builder &amp;lt;= 1.4.2 - Subscriber+ Privilege Escalation to Admin The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103694https://wpscan.com/vulnerability/5d087920-26f3-4c71-bfcb-ae9a70cc407f/#CVE_2026_103694#bot", "creation_timestamp": "2026-10-11T06:25:20.622954Z"}</description>
      <content:encoded>{"uuid": "02048f85-e1b5-4de0-9f9b-1744544567d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103694", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420845968693297", "content": "CVE-2026-103694 Mobile builder &amp;lt;= 1.4.2 - Subscriber+ Privilege Escalation to Admin The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103694https://wpscan.com/vulnerability/5d087920-26f3-4c71-bfcb-ae9a70cc407f/#CVE_2026_103694#bot", "creation_timestamp": "2026-10-11T06:25:20.622954Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/02048f85-e1b5-4de0-9f9b-1744544567d6/export</guid>
      <pubDate>Sun, 11 Oct 2026 06:25:20 +0000</pubDate>
    </item>
  </channel>
</rss>
