https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 16 Sep 2026 00:13:39 +0000 https://vulnerability.circl.lu/sighting/d5b4d17d-e382-409a-9db1-96e39d93417b/export {"uuid": "d5b4d17d-e382-409a-9db1-96e39d93417b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msjgdfwr4s2a", "content": "CVE-2026-15013 \u2013 miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)\n\nPosted by \u00d6ner Efe G\u00fcng\u00f6r on Aug 06Hello Full Disclosure, \n\nI'd like to share an independent lab Proof-of-Concept for CVE-2026-15013. \n\n### CVE-2026-15013 \u2013 miniOrange SAML SSO <= 5.4.3 \u2026\n#hackernews #ml #news", "creation_timestamp": "2026-08-07T20:44:40.030543Z"} {"uuid": "d5b4d17d-e382-409a-9db1-96e39d93417b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msjgdfwr4s2a", "content": "CVE-2026-15013 \u2013 miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)\n\nPosted by \u00d6ner Efe G\u00fcng\u00f6r on Aug 06Hello Full Disclosure, \n\nI'd like to share an independent lab Proof-of-Concept for CVE-2026-15013. \n\n### CVE-2026-15013 \u2013 miniOrange SAML SSO <= 5.4.3 \u2026\n#hackernews #ml #news", "creation_timestamp": "2026-08-07T20:44:40.030543Z"} https://vulnerability.circl.lu/sighting/d5b4d17d-e382-409a-9db1-96e39d93417b/export Fri, 07 Aug 2026 20:44:40 +0000 https://vulnerability.circl.lu/sighting/fcdfe9fa-8f95-4c43-9c35-35c52c33f90e/export {"uuid": "fcdfe9fa-8f95-4c43-9c35-35c52c33f90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "published-proof-of-concept", "source": "Telegram/7YKERi0HkdGPkFWoPqK0HlDRQTb5XVkOUaBEBQpAE8HwXcw", "content": "", "creation_timestamp": "2026-07-28T00:00:09.933146Z"} {"uuid": "fcdfe9fa-8f95-4c43-9c35-35c52c33f90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "published-proof-of-concept", "source": "Telegram/7YKERi0HkdGPkFWoPqK0HlDRQTb5XVkOUaBEBQpAE8HwXcw", "content": "", "creation_timestamp": "2026-07-28T00:00:09.933146Z"} https://vulnerability.circl.lu/sighting/fcdfe9fa-8f95-4c43-9c35-35c52c33f90e/export Tue, 28 Jul 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/778ea7de-0eca-4988-a5bb-43c80b1a02e3/export {"uuid": "778ea7de-0eca-4988-a5bb-43c80b1a02e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "Telegram/7YKERi0HkdGPkFWoPqK0HlDRQTb5XVkOUaBEBQpAE8HwXcw", "content": "", "creation_timestamp": "2026-07-27T21:00:03.826068Z"} {"uuid": "778ea7de-0eca-4988-a5bb-43c80b1a02e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "Telegram/7YKERi0HkdGPkFWoPqK0HlDRQTb5XVkOUaBEBQpAE8HwXcw", "content": "", "creation_timestamp": "2026-07-27T21:00:03.826068Z"} https://vulnerability.circl.lu/sighting/778ea7de-0eca-4988-a5bb-43c80b1a02e3/export Mon, 27 Jul 2026 21:00:03 +0000 https://vulnerability.circl.lu/sighting/7220057b-71e9-4600-8677-82e0fd466a0b/export {"uuid": "7220057b-71e9-4600-8677-82e0fd466a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqr6raztph24", "content": "CVE-2026-15013. SAML SSO plugin. 9.8/10 critical.\n\nAttackers bypass login entirely. No credentials needed. They become admin.\n\nYour user database. Site control. Gone.\n\nUpdate to 5.4.3 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-07-16T12:00:09.207412Z"} {"uuid": "7220057b-71e9-4600-8677-82e0fd466a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqr6raztph24", "content": "CVE-2026-15013. SAML SSO plugin. 9.8/10 critical.\n\nAttackers bypass login entirely. No credentials needed. They become admin.\n\nYour user database. Site control. Gone.\n\nUpdate to 5.4.3 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-07-16T12:00:09.207412Z"} https://vulnerability.circl.lu/sighting/7220057b-71e9-4600-8677-82e0fd466a0b/export Thu, 16 Jul 2026 12:00:09 +0000 https://vulnerability.circl.lu/sighting/d0f3094b-8a60-4ada-b39b-8d6c377902cc/export {"uuid": "d0f3094b-8a60-4ada-b39b-8d6c377902cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqngutwmi22", "content": "CVE-2026-15013 - SAML Single Sign On\nCVE ID : CVE-2026-15013\n \n Published : July 16, 2026, 5:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The SAML Single Sign On \u2013 SSO Login plugin for WordPress is vulnerable to Authentication Bypass via SAML Signature Algorithm Confusion...", "creation_timestamp": "2026-07-16T06:50:07.333405Z"} {"uuid": "d0f3094b-8a60-4ada-b39b-8d6c377902cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqqngutwmi22", "content": "CVE-2026-15013 - SAML Single Sign On\nCVE ID : CVE-2026-15013\n \n Published : July 16, 2026, 5:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The SAML Single Sign On \u2013 SSO Login plugin for WordPress is vulnerable to Authentication Bypass via SAML Signature Algorithm Confusion...", "creation_timestamp": "2026-07-16T06:50:07.333405Z"} https://vulnerability.circl.lu/sighting/d0f3094b-8a60-4ada-b39b-8d6c377902cc/export Thu, 16 Jul 2026 06:50:07 +0000 https://vulnerability.circl.lu/sighting/09afc881-5951-403f-ac2d-563187ef7ddc/export {"uuid": "09afc881-5951-403f-ac2d-563187ef7ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqqm3vnfg22u", "content": "CVE-2026-15013\nThe WordPress SAML SSO plugin has a security flaw that allows hackers to take control of any WordPress account, including administrator accounts. This is a serious issue because it allows unauthorized access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-16T06:26:05.743680Z"} {"uuid": "09afc881-5951-403f-ac2d-563187ef7ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15013", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqqm3vnfg22u", "content": "CVE-2026-15013\nThe WordPress SAML SSO plugin has a security flaw that allows hackers to take control of any WordPress account, including administrator accounts. This is a serious issue because it allows unauthorized access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-16T06:26:05.743680Z"} https://vulnerability.circl.lu/sighting/09afc881-5951-403f-ac2d-563187ef7ddc/export Thu, 16 Jul 2026 06:26:05 +0000 https://vulnerability.circl.lu/sighting/cd6b6a30-7216-4ea4-9c61-781b321c930f/export {"uuid": "cd6b6a30-7216-4ea4-9c61-781b321c930f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15013", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqqko4sy4f2z", "content": "CRITICAL: cyberlord92 SAML SSO Login for WordPress (\u22645.4.3) vulnerable to authentication bypass via signature confusion. Disable plugin or restrict usage until patch is available. https://radar.offseq.com/threat/cve-2026-15013-cwe-347-improper-verification-of-cr-9c8a5e33bdf9b83d #OffSeq #WordPres...", "creation_timestamp": "2026-07-16T06:00:29.820531Z"} {"uuid": "cd6b6a30-7216-4ea4-9c61-781b321c930f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15013", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqqko4sy4f2z", "content": "CRITICAL: cyberlord92 SAML SSO Login for WordPress (\u22645.4.3) vulnerable to authentication bypass via signature confusion. Disable plugin or restrict usage until patch is available. https://radar.offseq.com/threat/cve-2026-15013-cwe-347-improper-verification-of-cr-9c8a5e33bdf9b83d #OffSeq #WordPres...", "creation_timestamp": "2026-07-16T06:00:29.820531Z"} https://vulnerability.circl.lu/sighting/cd6b6a30-7216-4ea4-9c61-781b321c930f/export Thu, 16 Jul 2026 06:00:29 +0000 https://vulnerability.circl.lu/sighting/0d9f084f-5e3c-4e91-8c0d-c0f97228c241/export {"uuid": "0d9f084f-5e3c-4e91-8c0d-c0f97228c241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15013", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116928127100536568", "content": "CVE-2026-15013 | CRITICAL vuln in cyberlord92 SAML SSO Login (\u22645.4.3): Signature verification flaw enables authentication bypass & admin account takeover. Disable plugin until patched. https://radar.offseq.com/threat/cve-2026-15013-cwe-347-improper-verification-of-cr-9c8a5e33bdf9b83d #OffSeq #WordPress #CVE202615013 #SAML #Vuln", "creation_timestamp": "2026-07-16T06:00:27.844616Z"} {"uuid": "0d9f084f-5e3c-4e91-8c0d-c0f97228c241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15013", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116928127100536568", "content": "CVE-2026-15013 | CRITICAL vuln in cyberlord92 SAML SSO Login (\u22645.4.3): Signature verification flaw enables authentication bypass & admin account takeover. Disable plugin until patched. https://radar.offseq.com/threat/cve-2026-15013-cwe-347-improper-verification-of-cr-9c8a5e33bdf9b83d #OffSeq #WordPress #CVE202615013 #SAML #Vuln", "creation_timestamp": "2026-07-16T06:00:27.844616Z"} https://vulnerability.circl.lu/sighting/0d9f084f-5e3c-4e91-8c0d-c0f97228c241/export Thu, 16 Jul 2026 06:00:27 +0000