<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 08 Aug 2026 05:49:04 +0000</lastBuildDate>
    <item>
      <title>6a7c877a-0821-429e-8b8d-b72558b49380</title>
      <link>https://vulnerability.circl.lu/sighting/6a7c877a-0821-429e-8b8d-b72558b49380/export</link>
      <description>{"uuid": "6a7c877a-0821-429e-8b8d-b72558b49380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-23T00:00:24.841867Z"}</description>
      <content:encoded>{"uuid": "6a7c877a-0821-429e-8b8d-b72558b49380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-23T00:00:24.841867Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6a7c877a-0821-429e-8b8d-b72558b49380/export</guid>
      <pubDate>Thu, 23 Jul 2026 00:00:24 +0000</pubDate>
    </item>
    <item>
      <title>f7e37356-5a93-4e0e-9aa3-95f0967d2904</title>
      <link>https://vulnerability.circl.lu/sighting/f7e37356-5a93-4e0e-9aa3-95f0967d2904/export</link>
      <description>{"uuid": "f7e37356-5a93-4e0e-9aa3-95f0967d2904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-22T05:00:05.230240Z"}</description>
      <content:encoded>{"uuid": "f7e37356-5a93-4e0e-9aa3-95f0967d2904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-22T05:00:05.230240Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f7e37356-5a93-4e0e-9aa3-95f0967d2904/export</guid>
      <pubDate>Wed, 22 Jul 2026 05:00:05 +0000</pubDate>
    </item>
    <item>
      <title>c985eadf-8800-4fdc-afaf-ec84547aac1f</title>
      <link>https://vulnerability.circl.lu/sighting/c985eadf-8800-4fdc-afaf-ec84547aac1f/export</link>
      <description>{"uuid": "c985eadf-8800-4fdc-afaf-ec84547aac1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "Telegram/ZfPTk74vZzmZIe5sCn6LZYqmo9lWbfWIXqrCcyF6LM4oOA0", "content": "", "creation_timestamp": "2026-07-21T00:00:20.082700Z"}</description>
      <content:encoded>{"uuid": "c985eadf-8800-4fdc-afaf-ec84547aac1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "Telegram/ZfPTk74vZzmZIe5sCn6LZYqmo9lWbfWIXqrCcyF6LM4oOA0", "content": "", "creation_timestamp": "2026-07-21T00:00:20.082700Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c985eadf-8800-4fdc-afaf-ec84547aac1f/export</guid>
      <pubDate>Tue, 21 Jul 2026 00:00:20 +0000</pubDate>
    </item>
    <item>
      <title>6d55842c-e66c-4c16-a45b-2cd503e47601</title>
      <link>https://vulnerability.circl.lu/sighting/6d55842c-e66c-4c16-a45b-2cd503e47601/export</link>
      <description>{"uuid": "6d55842c-e66c-4c16-a45b-2cd503e47601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "Telegram/ZfPTk74vZzmZIe5sCn6LZYqmo9lWbfWIXqrCcyF6LM4oOA0", "content": "", "creation_timestamp": "2026-07-20T19:00:04.050307Z"}</description>
      <content:encoded>{"uuid": "6d55842c-e66c-4c16-a45b-2cd503e47601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "Telegram/ZfPTk74vZzmZIe5sCn6LZYqmo9lWbfWIXqrCcyF6LM4oOA0", "content": "", "creation_timestamp": "2026-07-20T19:00:04.050307Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6d55842c-e66c-4c16-a45b-2cd503e47601/export</guid>
      <pubDate>Mon, 20 Jul 2026 19:00:04 +0000</pubDate>
    </item>
    <item>
      <title>61e3fb2b-db4e-47a3-b92e-4de13f0e5225</title>
      <link>https://vulnerability.circl.lu/sighting/61e3fb2b-db4e-47a3-b92e-4de13f0e5225/export</link>
      <description>{"uuid": "61e3fb2b-db4e-47a3-b92e-4de13f0e5225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8592", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwy75oplfit2", "content": "", "creation_timestamp": "2025-08-22T10:00:44.681504Z"}</description>
      <content:encoded>{"uuid": "61e3fb2b-db4e-47a3-b92e-4de13f0e5225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8592", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lwy75oplfit2", "content": "", "creation_timestamp": "2025-08-22T10:00:44.681504Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/61e3fb2b-db4e-47a3-b92e-4de13f0e5225/export</guid>
      <pubDate>Fri, 22 Aug 2025 10:00:44 +0000</pubDate>
    </item>
    <item>
      <title>2bcca6c4-93fc-45af-9f26-5d8edc4f2ecd</title>
      <link>https://vulnerability.circl.lu/sighting/2bcca6c4-93fc-45af-9f26-5d8edc4f2ecd/export</link>
      <description>{"uuid": "2bcca6c4-93fc-45af-9f26-5d8edc4f2ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwy5wdqxq7v2", "content": "", "creation_timestamp": "2025-08-22T09:38:55.788308Z"}</description>
      <content:encoded>{"uuid": "2bcca6c4-93fc-45af-9f26-5d8edc4f2ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwy5wdqxq7v2", "content": "", "creation_timestamp": "2025-08-22T09:38:55.788308Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2bcca6c4-93fc-45af-9f26-5d8edc4f2ecd/export</guid>
      <pubDate>Fri, 22 Aug 2025 09:38:55 +0000</pubDate>
    </item>
    <item>
      <title>83bb9359-3992-43ce-ace8-09af7663aab5</title>
      <link>https://vulnerability.circl.lu/sighting/83bb9359-3992-43ce-ace8-09af7663aab5/export</link>
      <description>{"uuid": "83bb9359-3992-43ce-ace8-09af7663aab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8592", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lwviu4aqk222", "content": "", "creation_timestamp": "2025-08-21T08:16:21.920508Z"}</description>
      <content:encoded>{"uuid": "83bb9359-3992-43ce-ace8-09af7663aab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8592", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lwviu4aqk222", "content": "", "creation_timestamp": "2025-08-21T08:16:21.920508Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/83bb9359-3992-43ce-ace8-09af7663aab5/export</guid>
      <pubDate>Thu, 21 Aug 2025 08:16:21 +0000</pubDate>
    </item>
  </channel>
</rss>
