https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 11 Aug 2026 00:08:25 +0000 https://vulnerability.circl.lu/sighting/0668055e-386c-4e8a-9dde-e76e770ab190/export {"uuid": "0668055e-386c-4e8a-9dde-e76e770ab190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hkeyvempp3nox", "content": "CVE-2026-16032 - LWS Optimize\nCVE ID : CVE-2026-16032\n \n Published : Aug. 9, 2026, 6 a.m. | 27\u00a0minutes ago\n \n Description : The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it...", "creation_timestamp": "2026-08-09T06:49:51.505236Z"} {"uuid": "0668055e-386c-4e8a-9dde-e76e770ab190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hkeyvempp3nox", "content": "CVE-2026-16032 - LWS Optimize\nCVE ID : CVE-2026-16032\n \n Published : Aug. 9, 2026, 6 a.m. | 27\u00a0minutes ago\n \n Description : The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it...", "creation_timestamp": "2026-08-09T06:49:51.505236Z"} https://vulnerability.circl.lu/sighting/0668055e-386c-4e8a-9dde-e76e770ab190/export Sun, 09 Aug 2026 06:49:51 +0000 https://vulnerability.circl.lu/sighting/6b1015b7-c59a-4416-b37d-b79993f8e567/export {"uuid": "6b1015b7-c59a-4416-b37d-b79993f8e567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16038", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mslgw5t3qc27", "content": "\ud83d\udd34 CVE-2026-16038 - Critical (9.1)\n\nThe MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gatew...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16038/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T16:00:28.637144Z"} {"uuid": "6b1015b7-c59a-4416-b37d-b79993f8e567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16038", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mslgw5t3qc27", "content": "\ud83d\udd34 CVE-2026-16038 - Critical (9.1)\n\nThe MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gatew...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16038/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T16:00:28.637144Z"} https://vulnerability.circl.lu/sighting/6b1015b7-c59a-4416-b37d-b79993f8e567/export Sat, 08 Aug 2026 16:00:28 +0000 https://vulnerability.circl.lu/sighting/d320ffe5-9f97-4457-9f66-ddf1cbe89342/export {"uuid": "d320ffe5-9f97-4457-9f66-ddf1cbe89342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16030", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mslgvx3m7r2u", "content": "\ud83d\udfe0 CVE-2026-16030 - High (8.1)\n\nThe MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16030/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T16:00:22.083912Z"} {"uuid": "d320ffe5-9f97-4457-9f66-ddf1cbe89342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16030", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mslgvx3m7r2u", "content": "\ud83d\udfe0 CVE-2026-16030 - High (8.1)\n\nThe MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16030/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T16:00:22.083912Z"} https://vulnerability.circl.lu/sighting/d320ffe5-9f97-4457-9f66-ddf1cbe89342/export Sat, 08 Aug 2026 16:00:22 +0000 https://vulnerability.circl.lu/sighting/e4edb15b-f060-42b3-9ce9-5fd89f572622/export {"uuid": "e4edb15b-f060-42b3-9ce9-5fd89f572622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:36:28.380193Z"} {"uuid": "e4edb15b-f060-42b3-9ce9-5fd89f572622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:36:28.380193Z"} https://vulnerability.circl.lu/sighting/e4edb15b-f060-42b3-9ce9-5fd89f572622/export Fri, 07 Aug 2026 10:36:28 +0000 https://vulnerability.circl.lu/sighting/ee347736-beb7-4d7e-bffd-3ecdb4c35442/export {"uuid": "ee347736-beb7-4d7e-bffd-3ecdb4c35442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16030", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117053405708747434", "content": "MStore API WordPress plugin (<4.21.0) hit by CRITICAL vuln (CVE-2026-16030): improper phone token checks enable account takeover, incl. admins. Restrict endpoints & monitor logins until patched. https://radar.offseq.com/threat/cve-2026-16030-cwe-287-improper-authentication-in-mstore-api-799def1fc3890a44 #OffSeq #WordPress #CVE2026_16030 #Vuln", "creation_timestamp": "2026-08-07T09:00:27.504055Z"} {"uuid": "ee347736-beb7-4d7e-bffd-3ecdb4c35442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16030", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117053405708747434", "content": "MStore API WordPress plugin (<4.21.0) hit by CRITICAL vuln (CVE-2026-16030): improper phone token checks enable account takeover, incl. admins. Restrict endpoints & monitor logins until patched. https://radar.offseq.com/threat/cve-2026-16030-cwe-287-improper-authentication-in-mstore-api-799def1fc3890a44 #OffSeq #WordPress #CVE2026_16030 #Vuln", "creation_timestamp": "2026-08-07T09:00:27.504055Z"} https://vulnerability.circl.lu/sighting/ee347736-beb7-4d7e-bffd-3ecdb4c35442/export Fri, 07 Aug 2026 09:00:27 +0000 https://vulnerability.circl.lu/sighting/518fdb31-0e61-493b-a5f9-c612905ca466/export {"uuid": "518fdb31-0e61-493b-a5f9-c612905ca466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:07.080076Z"} {"uuid": "518fdb31-0e61-493b-a5f9-c612905ca466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:07.080076Z"} https://vulnerability.circl.lu/sighting/518fdb31-0e61-493b-a5f9-c612905ca466/export Sat, 01 Aug 2026 10:00:07 +0000 https://vulnerability.circl.lu/sighting/02cfdd60-8e32-4a37-973b-8a44df2a372f/export {"uuid": "02cfdd60-8e32-4a37-973b-8a44df2a372f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:15:05.979043Z"} {"uuid": "02cfdd60-8e32-4a37-973b-8a44df2a372f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:15:05.979043Z"} https://vulnerability.circl.lu/sighting/02cfdd60-8e32-4a37-973b-8a44df2a372f/export Fri, 24 Jul 2026 10:15:05 +0000 https://vulnerability.circl.lu/sighting/8a5f810c-72f8-4e54-b660-f63a086a9ee9/export {"uuid": "8a5f810c-72f8-4e54-b660-f63a086a9ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:07.892238Z"} {"uuid": "8a5f810c-72f8-4e54-b660-f63a086a9ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:07.892238Z"} https://vulnerability.circl.lu/sighting/8a5f810c-72f8-4e54-b660-f63a086a9ee9/export Tue, 07 Jul 2026 10:15:07 +0000 https://vulnerability.circl.lu/sighting/e8ecae61-8986-4867-8116-20c96b0175f2/export {"uuid": "e8ecae61-8986-4867-8116-20c96b0175f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:00:05.803488Z"} {"uuid": "e8ecae61-8986-4867-8116-20c96b0175f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1603", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:00:05.803488Z"} https://vulnerability.circl.lu/sighting/e8ecae61-8986-4867-8116-20c96b0175f2/export Tue, 30 Jun 2026 10:00:05 +0000 https://vulnerability.circl.lu/sighting/df4f16a9-ab87-448e-aa4f-2df7db73090a/export {"uuid": "df4f16a9-ab87-448e-aa4f-2df7db73090a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a73e833c-6418-47ef-88d9-a544f4dd3907", "content": "", "creation_timestamp": "2026-06-30T09:22:35.030433Z"} {"uuid": "df4f16a9-ab87-448e-aa4f-2df7db73090a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-1603", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a73e833c-6418-47ef-88d9-a544f4dd3907", "content": "", "creation_timestamp": "2026-06-30T09:22:35.030433Z"} https://vulnerability.circl.lu/sighting/df4f16a9-ab87-448e-aa4f-2df7db73090a/export Tue, 30 Jun 2026 09:22:35 +0000