https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 30 Aug 2026 19:06:39 +0000 https://vulnerability.circl.lu/sighting/15339f6e-2e23-46bb-b1a0-e4a2f4510d4e/export {"uuid": "15339f6e-2e23-46bb-b1a0-e4a2f4510d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mucjn27obl2y", "content": "\ud83e\udd16 CVE-2026-76581 (CVSS 9.8): auth bypass in WPMU DEV Dashboard; critical flaws also in Avada, TranslatePress, Pods, GiveWP \u2014 WordPress site takeover or RCE possible.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T13:45:29.602207Z"} {"uuid": "15339f6e-2e23-46bb-b1a0-e4a2f4510d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mucjn27obl2y", "content": "\ud83e\udd16 CVE-2026-76581 (CVSS 9.8): auth bypass in WPMU DEV Dashboard; critical flaws also in Avada, TranslatePress, Pods, GiveWP \u2014 WordPress site takeover or RCE possible.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T13:45:29.602207Z"} https://vulnerability.circl.lu/sighting/15339f6e-2e23-46bb-b1a0-e4a2f4510d4e/export Sun, 30 Aug 2026 13:45:29 +0000 https://vulnerability.circl.lu/sighting/0bd71e06-e2b0-48c1-9c13-98a8c1827d50/export {"uuid": "0bd71e06-e2b0-48c1-9c13-98a8c1827d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-30T03:00:04.578271Z"} {"uuid": "0bd71e06-e2b0-48c1-9c13-98a8c1827d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-30T03:00:04.578271Z"} https://vulnerability.circl.lu/sighting/0bd71e06-e2b0-48c1-9c13-98a8c1827d50/export Sun, 30 Aug 2026 03:00:04 +0000 https://vulnerability.circl.lu/sighting/bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5/export {"uuid": "bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mubaoczury2g", "content": "\ud83e\udd16 Five critical WordPress plugin/theme flaws (WPMU DEV Dashboard, Avada, TranslatePress, Pods, GiveWP) lead to auth bypass, account takeover and RCE. CVE-2026-76581, CVSS 9.8.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T01:32:28.773582Z"} {"uuid": "bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mubaoczury2g", "content": "\ud83e\udd16 Five critical WordPress plugin/theme flaws (WPMU DEV Dashboard, Avada, TranslatePress, Pods, GiveWP) lead to auth bypass, account takeover and RCE. CVE-2026-76581, CVSS 9.8.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T01:32:28.773582Z"} https://vulnerability.circl.lu/sighting/bd43e4f6-2a1c-46e1-96a9-7d74cb4fefd5/export Sun, 30 Aug 2026 01:32:28 +0000 https://vulnerability.circl.lu/sighting/1e932d80-372f-4bd1-b789-0d440990db31/export {"uuid": "1e932d80-372f-4bd1-b789-0d440990db31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "content": "Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in", "creation_timestamp": "2026-08-30T01:00:33.275003Z"} {"uuid": "1e932d80-372f-4bd1-b789-0d440990db31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "content": "Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in", "creation_timestamp": "2026-08-30T01:00:33.275003Z"} https://vulnerability.circl.lu/sighting/1e932d80-372f-4bd1-b789-0d440990db31/export Sun, 30 Aug 2026 01:00:33 +0000 https://vulnerability.circl.lu/sighting/1a2218ca-1f42-4a32-a409-ea0a79dbff93/export {"uuid": "1a2218ca-1f42-4a32-a409-ea0a79dbff93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-30T00:00:38.227906Z"} {"uuid": "1a2218ca-1f42-4a32-a409-ea0a79dbff93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-30T00:00:38.227906Z"} https://vulnerability.circl.lu/sighting/1a2218ca-1f42-4a32-a409-ea0a79dbff93/export Sun, 30 Aug 2026 00:00:38 +0000 https://vulnerability.circl.lu/sighting/6bfd1759-ec78-4890-a28a-595fccae0b16/export {"uuid": "6bfd1759-ec78-4890-a28a-595fccae0b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-29T21:00:04.140479Z"} {"uuid": "6bfd1759-ec78-4890-a28a-595fccae0b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/captainsmok3r_official/508", "content": "CVE-2026-76581 with a CVSS score of 9.8, has been discovered in the WPMU DEV Dashboard plugin on WordPress.\nThis vulnerability exploits a canonicalization error in Hub SSO's HMAC validation. An attacker who does not require authentication can obtain an admin session by reusing the HMAC in a different SSO step.", "creation_timestamp": "2026-08-29T21:00:04.140479Z"} https://vulnerability.circl.lu/sighting/6bfd1759-ec78-4890-a28a-595fccae0b16/export Sat, 29 Aug 2026 21:00:04 +0000 https://vulnerability.circl.lu/sighting/795ef4bc-56da-454f-9402-622d32a3cba8/export {"uuid": "795ef4bc-56da-454f-9402-622d32a3cba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "content": "Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in", "creation_timestamp": "2026-08-29T19:00:38.027849Z"} {"uuid": "795ef4bc-56da-454f-9402-622d32a3cba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "content": "Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in", "creation_timestamp": "2026-08-29T19:00:38.027849Z"} https://vulnerability.circl.lu/sighting/795ef4bc-56da-454f-9402-622d32a3cba8/export Sat, 29 Aug 2026 19:00:38 +0000 https://vulnerability.circl.lu/sighting/dbfead8c-dad4-494f-a202-2d7492b2b690/export {"uuid": "dbfead8c-dad4-494f-a202-2d7492b2b690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6scogo2m2m", "content": "CVE-2026-76581\nWordPress sites that use the WPMU DEV Dashboard plugin version 5.0.1 or earlier are at risk. Because of a flaw in how the plugin validates login requests, someone without credentials can trick the system into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T02:10:06.021732Z"} {"uuid": "dbfead8c-dad4-494f-a202-2d7492b2b690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6scogo2m2m", "content": "CVE-2026-76581\nWordPress sites that use the WPMU DEV Dashboard plugin version 5.0.1 or earlier are at risk. Because of a flaw in how the plugin validates login requests, someone without credentials can trick the system into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T02:10:06.021732Z"} https://vulnerability.circl.lu/sighting/dbfead8c-dad4-494f-a202-2d7492b2b690/export Sat, 29 Aug 2026 02:10:06 +0000 https://vulnerability.circl.lu/sighting/68cdd855-84d1-4520-b8a3-d8aca38470fe/export {"uuid": "68cdd855-84d1-4520-b8a3-d8aca38470fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/pphm_HackerNews/2924", "content": "\ud83d\udd34 Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover\n\nA critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin, which could allow unauthenticated attackers to gain administrator-level access to vulnerable sites configured with Hub Single Sign-On (SSO).\n\nThis vulnerability, tracked as CVE-2026-76581, has a CVSS score of 9.8 and affects WPMU DEV Dashboard versions 5.0.1 and earlier. The plugin has approximately 350,000 active installations. WPMU DEV released version 5.0.2 on August 24, 2026, to address this issue.", "creation_timestamp": "2026-08-29T00:00:07.351709Z"} {"uuid": "68cdd855-84d1-4520-b8a3-d8aca38470fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/pphm_HackerNews/2924", "content": "\ud83d\udd34 Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover\n\nA critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin, which could allow unauthenticated attackers to gain administrator-level access to vulnerable sites configured with Hub Single Sign-On (SSO).\n\nThis vulnerability, tracked as CVE-2026-76581, has a CVSS score of 9.8 and affects WPMU DEV Dashboard versions 5.0.1 and earlier. The plugin has approximately 350,000 active installations. WPMU DEV released version 5.0.2 on August 24, 2026, to address this issue.", "creation_timestamp": "2026-08-29T00:00:07.351709Z"} https://vulnerability.circl.lu/sighting/68cdd855-84d1-4520-b8a3-d8aca38470fe/export Sat, 29 Aug 2026 00:00:07 +0000 https://vulnerability.circl.lu/sighting/dcff4d86-81ff-46de-b74f-91bf42d1af19/export {"uuid": "dcff4d86-81ff-46de-b74f-91bf42d1af19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/pphm_HackerNews/2924", "content": "\ud83d\udd34 Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover\n\nA critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin, which could allow unauthenticated attackers to gain administrator-level access to vulnerable sites configured with Hub Single Sign-On (SSO).\n\nThis vulnerability, tracked as CVE-2026-76581, has a CVSS score of 9.8 and affects WPMU DEV Dashboard versions 5.0.1 and earlier. The plugin has approximately 350,000 active installations. WPMU DEV released version 5.0.2 on August 24, 2026, to address this issue.", "creation_timestamp": "2026-08-28T21:00:04.318436Z"} {"uuid": "dcff4d86-81ff-46de-b74f-91bf42d1af19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/pphm_HackerNews/2924", "content": "\ud83d\udd34 Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover\n\nA critical authentication bypass vulnerability has been identified in the WPMU DEV Dashboard WordPress plugin, which could allow unauthenticated attackers to gain administrator-level access to vulnerable sites configured with Hub Single Sign-On (SSO).\n\nThis vulnerability, tracked as CVE-2026-76581, has a CVSS score of 9.8 and affects WPMU DEV Dashboard versions 5.0.1 and earlier. The plugin has approximately 350,000 active installations. WPMU DEV released version 5.0.2 on August 24, 2026, to address this issue.", "creation_timestamp": "2026-08-28T21:00:04.318436Z"} https://vulnerability.circl.lu/sighting/dcff4d86-81ff-46de-b74f-91bf42d1af19/export Fri, 28 Aug 2026 21:00:04 +0000