<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 11:25:55 +0000</lastBuildDate>
    <item>
      <title>5c4b1e33-8d5b-4421-b267-6ca6f1a07c8d</title>
      <link>https://vulnerability.circl.lu/sighting/5c4b1e33-8d5b-4421-b267-6ca6f1a07c8d/export</link>
      <description>{"uuid": "5c4b1e33-8d5b-4421-b267-6ca6f1a07c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "content": "", "creation_timestamp": "2026-09-09T00:00:42.050692Z"}</description>
      <content:encoded>{"uuid": "5c4b1e33-8d5b-4421-b267-6ca6f1a07c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "content": "", "creation_timestamp": "2026-09-09T00:00:42.050692Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5c4b1e33-8d5b-4421-b267-6ca6f1a07c8d/export</guid>
      <pubDate>Wed, 09 Sep 2026 00:00:42 +0000</pubDate>
    </item>
    <item>
      <title>db1b994f-2c1b-4871-b3b9-67db8f81e707</title>
      <link>https://vulnerability.circl.lu/sighting/db1b994f-2c1b-4871-b3b9-67db8f81e707/export</link>
      <description>{"uuid": "db1b994f-2c1b-4871-b3b9-67db8f81e707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "content": "", "creation_timestamp": "2026-09-08T04:00:03.687633Z"}</description>
      <content:encoded>{"uuid": "db1b994f-2c1b-4871-b3b9-67db8f81e707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "content": "", "creation_timestamp": "2026-09-08T04:00:03.687633Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/db1b994f-2c1b-4871-b3b9-67db8f81e707/export</guid>
      <pubDate>Tue, 08 Sep 2026 04:00:03 +0000</pubDate>
    </item>
    <item>
      <title>89d27562-7d00-44a7-9f8a-b2164f818d0f</title>
      <link>https://vulnerability.circl.lu/sighting/89d27562-7d00-44a7-9f8a-b2164f818d0f/export</link>
      <description>{"uuid": "89d27562-7d00-44a7-9f8a-b2164f818d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-rilevata-vulnerabilita-nel-plugin-pods", "content": "", "creation_timestamp": "2026-08-28T12:45:05.858281Z"}</description>
      <content:encoded>{"uuid": "89d27562-7d00-44a7-9f8a-b2164f818d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-rilevata-vulnerabilita-nel-plugin-pods", "content": "", "creation_timestamp": "2026-08-28T12:45:05.858281Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/89d27562-7d00-44a7-9f8a-b2164f818d0f/export</guid>
      <pubDate>Fri, 28 Aug 2026 12:45:05 +0000</pubDate>
    </item>
    <item>
      <title>2e8e187f-d403-4703-abbf-417a8b5532df</title>
      <link>https://vulnerability.circl.lu/sighting/2e8e187f-d403-4703-abbf-417a8b5532df/export</link>
      <description>{"uuid": "2e8e187f-d403-4703-abbf-417a8b5532df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mu2epr2lsy2u", "content": "CVE-2026-19598: Pods\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30ea\u30bb\u30c3\u30c8\u53ef\u80fd\u306b\n\nWordPress\u30b5\u30a4\u30c8\u7ba1\u7406\u8005\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u30ed\u30b0\u30a4\u30f3\u3059\u3089\u7d4c\u305a\u306b\u5909\u66f4\u3055\u308c\u3066\u3057\u307e\u3046\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u4eba\u6c17\u30d7\u30e9\u30b0\u30a4\u30f3Pods\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3092\u6301\u305f\u306a\u3044\u7b2c\u4e09\u8005\u304c\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u3092\u6b21\u3005\u3068\u56de\u907f\u3057\u3001\u7ba1\u7406\u6a5f\u80fd\u306b\u76f4\u63a5\u5230\u9054\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u3063\u3066\u3044\u307e\u3057\u305f\u3002Wordfence\u306b\u3088\u308b\u3068...", "creation_timestamp": "2026-08-27T07:56:14.041021Z"}</description>
      <content:encoded>{"uuid": "2e8e187f-d403-4703-abbf-417a8b5532df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mu2epr2lsy2u", "content": "CVE-2026-19598: Pods\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30ea\u30bb\u30c3\u30c8\u53ef\u80fd\u306b\n\nWordPress\u30b5\u30a4\u30c8\u7ba1\u7406\u8005\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u30ed\u30b0\u30a4\u30f3\u3059\u3089\u7d4c\u305a\u306b\u5909\u66f4\u3055\u308c\u3066\u3057\u307e\u3046\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u4eba\u6c17\u30d7\u30e9\u30b0\u30a4\u30f3Pods\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3092\u6301\u305f\u306a\u3044\u7b2c\u4e09\u8005\u304c\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u3092\u6b21\u3005\u3068\u56de\u907f\u3057\u3001\u7ba1\u7406\u6a5f\u80fd\u306b\u76f4\u63a5\u5230\u9054\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u3063\u3066\u3044\u307e\u3057\u305f\u3002Wordfence\u306b\u3088\u308b\u3068...", "creation_timestamp": "2026-08-27T07:56:14.041021Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2e8e187f-d403-4703-abbf-417a8b5532df/export</guid>
      <pubDate>Thu, 27 Aug 2026 07:56:14 +0000</pubDate>
    </item>
    <item>
      <title>3503ebb2-2985-4b13-a803-cc20ab020126</title>
      <link>https://vulnerability.circl.lu/sighting/3503ebb2-2985-4b13-a803-cc20ab020126/export</link>
      <description>{"uuid": "3503ebb2-2985-4b13-a803-cc20ab020126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu2eihqcj426", "content": "Wordfence found CVE-2026-19598, a critical unauthenticated flaw in the Pods WordPress plugin (100,000+ installs) letting attackers reset any password, including the admin's.\n\n#PodsPlugin #CVE202619598 #WordPress #Wordfence #PrivilegeEscalation", "creation_timestamp": "2026-08-27T07:52:09.780345Z"}</description>
      <content:encoded>{"uuid": "3503ebb2-2985-4b13-a803-cc20ab020126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu2eihqcj426", "content": "Wordfence found CVE-2026-19598, a critical unauthenticated flaw in the Pods WordPress plugin (100,000+ installs) letting attackers reset any password, including the admin's.\n\n#PodsPlugin #CVE202619598 #WordPress #Wordfence #PrivilegeEscalation", "creation_timestamp": "2026-08-27T07:52:09.780345Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3503ebb2-2985-4b13-a803-cc20ab020126/export</guid>
      <pubDate>Thu, 27 Aug 2026 07:52:09 +0000</pubDate>
    </item>
    <item>
      <title>a0fe841f-2b87-47f9-8e55-6d559ea4692a</title>
      <link>https://vulnerability.circl.lu/sighting/a0fe841f-2b87-47f9-8e55-6d559ea4692a/export</link>
      <description>{"uuid": "a0fe841f-2b87-47f9-8e55-6d559ea4692a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtywdbqygh2x", "content": "CVE-2026-19598 is trending. Hype score 5, currently #4 on cvemon.\n\nThe Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19598", "creation_timestamp": "2026-08-26T18:06:03.847541Z"}</description>
      <content:encoded>{"uuid": "a0fe841f-2b87-47f9-8e55-6d559ea4692a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtywdbqygh2x", "content": "CVE-2026-19598 is trending. Hype score 5, currently #4 on cvemon.\n\nThe Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19598", "creation_timestamp": "2026-08-26T18:06:03.847541Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a0fe841f-2b87-47f9-8e55-6d559ea4692a/export</guid>
      <pubDate>Wed, 26 Aug 2026 18:06:03 +0000</pubDate>
    </item>
    <item>
      <title>3822cfbe-f7e3-43f9-a95f-9668df2c93e7</title>
      <link>https://vulnerability.circl.lu/sighting/3822cfbe-f7e3-43f9-a95f-9668df2c93e7/export</link>
      <description>{"uuid": "3822cfbe-f7e3-43f9-a95f-9668df2c93e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/475", "content": "CVE-2026-19598-PoC -&amp;gt;", "creation_timestamp": "2026-08-25T12:00:04.238647Z"}</description>
      <content:encoded>{"uuid": "3822cfbe-f7e3-43f9-a95f-9668df2c93e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/475", "content": "CVE-2026-19598-PoC -&amp;gt;", "creation_timestamp": "2026-08-25T12:00:04.238647Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3822cfbe-f7e3-43f9-a95f-9668df2c93e7/export</guid>
      <pubDate>Tue, 25 Aug 2026 12:00:04 +0000</pubDate>
    </item>
    <item>
      <title>a33b955a-ea8e-4291-b52c-5946c836e523</title>
      <link>https://vulnerability.circl.lu/sighting/a33b955a-ea8e-4291-b52c-5946c836e523/export</link>
      <description>{"uuid": "a33b955a-ea8e-4291-b52c-5946c836e523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/476", "content": "", "creation_timestamp": "2026-08-25T12:00:04.193063Z"}</description>
      <content:encoded>{"uuid": "a33b955a-ea8e-4291-b52c-5946c836e523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/476", "content": "", "creation_timestamp": "2026-08-25T12:00:04.193063Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a33b955a-ea8e-4291-b52c-5946c836e523/export</guid>
      <pubDate>Tue, 25 Aug 2026 12:00:04 +0000</pubDate>
    </item>
    <item>
      <title>545bdbd3-f65c-4dcc-85b1-4daaae1b7976</title>
      <link>https://vulnerability.circl.lu/sighting/545bdbd3-f65c-4dcc-85b1-4daaae1b7976/export</link>
      <description>{"uuid": "545bdbd3-f65c-4dcc-85b1-4daaae1b7976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23u5pzq2n", "content": "Daily IT Security Digest \u2014 2026-08-25\nVulnerability (CVE-2026-19598) \u2014 Full Site Takeover\n\nAn unauthenticated authorization bypass in the widely-used Pods WordPress plugin (CVE-2026-19598) allows attackers to bypass security checks entirely and gain full administrator access. This gives attackers", "creation_timestamp": "2026-08-25T05:02:49.898679Z"}</description>
      <content:encoded>{"uuid": "545bdbd3-f65c-4dcc-85b1-4daaae1b7976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23u5pzq2n", "content": "Daily IT Security Digest \u2014 2026-08-25\nVulnerability (CVE-2026-19598) \u2014 Full Site Takeover\n\nAn unauthenticated authorization bypass in the widely-used Pods WordPress plugin (CVE-2026-19598) allows attackers to bypass security checks entirely and gain full administrator access. This gives attackers", "creation_timestamp": "2026-08-25T05:02:49.898679Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/545bdbd3-f65c-4dcc-85b1-4daaae1b7976/export</guid>
      <pubDate>Tue, 25 Aug 2026 05:02:49 +0000</pubDate>
    </item>
    <item>
      <title>6b228097-b74a-4f37-a98e-7f665f98b5e1</title>
      <link>https://vulnerability.circl.lu/sighting/6b228097-b74a-4f37-a98e-7f665f98b5e1/export</link>
      <description>{"uuid": "6b228097-b74a-4f37-a98e-7f665f98b5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-24T15:00:05.948925Z"}</description>
      <content:encoded>{"uuid": "6b228097-b74a-4f37-a98e-7f665f98b5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-24T15:00:05.948925Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6b228097-b74a-4f37-a98e-7f665f98b5e1/export</guid>
      <pubDate>Mon, 24 Aug 2026 15:00:05 +0000</pubDate>
    </item>
  </channel>
</rss>
