<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 23 Jun 2026 03:18:52 +0000</lastBuildDate>
    <item>
      <title>9d3d8ba7-72b3-40b5-b2f8-5088b8e1a4e9</title>
      <link>https://vulnerability.circl.lu/sighting/9d3d8ba7-72b3-40b5-b2f8-5088b8e1a4e9/export</link>
      <description>{"uuid": "9d3d8ba7-72b3-40b5-b2f8-5088b8e1a4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11911", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mopnmxu4ut2i", "content": "HIGH severity flaw in eemitch Simple File List \u22646.3.7 enables unauth file deletion via AJAX, risking RCE. Restrict admin-ajax.php or disable the plugin until patch. Details: https://radar.offseq.com/threat/cve-2026-11911-cwe-22-improper-limitation-of-a-pat-c1bb6257a58c2645 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-06-20T10:30:29.512031Z"}</description>
      <content:encoded>{"uuid": "9d3d8ba7-72b3-40b5-b2f8-5088b8e1a4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11911", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mopnmxu4ut2i", "content": "HIGH severity flaw in eemitch Simple File List \u22646.3.7 enables unauth file deletion via AJAX, risking RCE. Restrict admin-ajax.php or disable the plugin until patch. Details: https://radar.offseq.com/threat/cve-2026-11911-cwe-22-improper-limitation-of-a-pat-c1bb6257a58c2645 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-06-20T10:30:29.512031Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9d3d8ba7-72b3-40b5-b2f8-5088b8e1a4e9/export</guid>
      <pubDate>Sat, 20 Jun 2026 10:30:29 +0000</pubDate>
    </item>
    <item>
      <title>ac6a32b9-e495-4446-acea-e593a6067167</title>
      <link>https://vulnerability.circl.lu/sighting/ac6a32b9-e495-4446-acea-e593a6067167/export</link>
      <description>{"uuid": "ac6a32b9-e495-4446-acea-e593a6067167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11911", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116781968685290768", "content": "CVE-2026-11911: HIGH severity path traversal in eemitch Simple File List (\u22646.3.7). Unauth attackers can delete files via exposed AJAX action, risking RCE. Restrict admin-ajax.php or disable plugin. Details: https://radar.offseq.com/threat/cve-2026-11911-cwe-22-improper-limitation-of-a-pat-c1bb6257a58c2645 #OffSeq #WordPress #Security", "creation_timestamp": "2026-06-20T10:30:34.153738Z"}</description>
      <content:encoded>{"uuid": "ac6a32b9-e495-4446-acea-e593a6067167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11911", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116781968685290768", "content": "CVE-2026-11911: HIGH severity path traversal in eemitch Simple File List (\u22646.3.7). Unauth attackers can delete files via exposed AJAX action, risking RCE. Restrict admin-ajax.php or disable plugin. Details: https://radar.offseq.com/threat/cve-2026-11911-cwe-22-improper-limitation-of-a-pat-c1bb6257a58c2645 #OffSeq #WordPress #Security", "creation_timestamp": "2026-06-20T10:30:34.153738Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ac6a32b9-e495-4446-acea-e593a6067167/export</guid>
      <pubDate>Sat, 20 Jun 2026 10:30:34 +0000</pubDate>
    </item>
    <item>
      <title>e8e5d694-d4d3-4951-996a-263f91896b4a</title>
      <link>https://vulnerability.circl.lu/sighting/e8e5d694-d4d3-4951-996a-263f91896b4a/export</link>
      <description>{"uuid": "e8e5d694-d4d3-4951-996a-263f91896b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mops2wgxvv2e", "content": "CVE-2026-11911 - Simple File List\nCVE ID : CVE-2026-11911\n \n Published : June 20, 2026, 8:29 a.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL...", "creation_timestamp": "2026-06-20T11:49:52.256549Z"}</description>
      <content:encoded>{"uuid": "e8e5d694-d4d3-4951-996a-263f91896b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mops2wgxvv2e", "content": "CVE-2026-11911 - Simple File List\nCVE ID : CVE-2026-11911\n \n Published : June 20, 2026, 8:29 a.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : The Simple File List plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the eeSFL...", "creation_timestamp": "2026-06-20T11:49:52.256549Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e8e5d694-d4d3-4951-996a-263f91896b4a/export</guid>
      <pubDate>Sat, 20 Jun 2026 11:49:52 +0000</pubDate>
    </item>
    <item>
      <title>f44e1760-56a9-4d44-8fba-91a9622ccd81</title>
      <link>https://vulnerability.circl.lu/sighting/f44e1760-56a9-4d44-8fba-91a9622ccd81/export</link>
      <description>{"uuid": "f44e1760-56a9-4d44-8fba-91a9622ccd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moqb67alv32q", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3Simple File List\uff086.3.7\u4ee5\u524d\uff09\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3067\u304d\u308b\u8106\u5f31\u6027\u3002wp-config.php\u524a\u9664\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-11911 CVSS 7.5 | HIGH", "creation_timestamp": "2026-06-20T16:20:07.909722Z"}</description>
      <content:encoded>{"uuid": "f44e1760-56a9-4d44-8fba-91a9622ccd81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moqb67alv32q", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3Simple File List\uff086.3.7\u4ee5\u524d\uff09\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3067\u304d\u308b\u8106\u5f31\u6027\u3002wp-config.php\u524a\u9664\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-11911 CVSS 7.5 | HIGH", "creation_timestamp": "2026-06-20T16:20:07.909722Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f44e1760-56a9-4d44-8fba-91a9622ccd81/export</guid>
      <pubDate>Sat, 20 Jun 2026 16:20:07 +0000</pubDate>
    </item>
    <item>
      <title>9edd2ee8-f08b-42ec-97a6-68002310a32d</title>
      <link>https://vulnerability.circl.lu/sighting/9edd2ee8-f08b-42ec-97a6-68002310a32d/export</link>
      <description>{"uuid": "9edd2ee8-f08b-42ec-97a6-68002310a32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mov2kqoxi627", "content": "CVE-2026-11911 - RCE in Simple File List WordPress plugin. Unauthenticated arbitrary file deletion via insufficient path validation. CVSS 7.5. No patch exists. Update or disable immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-11911/", "creation_timestamp": "2026-06-22T14:05:11.867773Z"}</description>
      <content:encoded>{"uuid": "9edd2ee8-f08b-42ec-97a6-68002310a32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11911", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mov2kqoxi627", "content": "CVE-2026-11911 - RCE in Simple File List WordPress plugin. Unauthenticated arbitrary file deletion via insufficient path validation. CVSS 7.5. No patch exists. Update or disable immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-11911/", "creation_timestamp": "2026-06-22T14:05:11.867773Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9edd2ee8-f08b-42ec-97a6-68002310a32d/export</guid>
      <pubDate>Mon, 22 Jun 2026 14:05:11 +0000</pubDate>
    </item>
  </channel>
</rss>
