https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 14:18:35 +0000 https://vulnerability.circl.lu/sighting/db156ccf-6b29-4192-8b6b-8ba214ad6a02/export {"uuid": "db156ccf-6b29-4192-8b6b-8ba214ad6a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/VulnerabilityNews/44224", "content": "Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE\n\nMultiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-09-18T12:00:05.920015Z"} {"uuid": "db156ccf-6b29-4192-8b6b-8ba214ad6a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://t.me/VulnerabilityNews/44224", "content": "Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE\n\nMultiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution.\n\nThe vulnerabilities, according to Wordfence and Patchstack, are listed below -\n\n\n CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-09-18T12:00:05.920015Z"} https://vulnerability.circl.lu/sighting/db156ccf-6b29-4192-8b6b-8ba214ad6a02/export Fri, 18 Sep 2026 12:00:05 +0000 https://vulnerability.circl.lu/sighting/75fbf1c5-0ce4-4f67-9041-59bcf03e2597/export {"uuid": "75fbf1c5-0ce4-4f67-9041-59bcf03e2597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-03T00:00:39.006744Z"} {"uuid": "75fbf1c5-0ce4-4f67-9041-59bcf03e2597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-03T00:00:39.006744Z"} https://vulnerability.circl.lu/sighting/75fbf1c5-0ce4-4f67-9041-59bcf03e2597/export Thu, 03 Sep 2026 00:00:39 +0000 https://vulnerability.circl.lu/sighting/e4da3fe3-62af-470f-9bdb-b06f1b14c02b/export {"uuid": "e4da3fe3-62af-470f-9bdb-b06f1b14c02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/0_ZePU3z1OawFEHN1iA2HBha57r29KdDO83DysbbQUG6xbo", "content": "", "creation_timestamp": "2026-09-03T00:00:38.553914Z"} {"uuid": "e4da3fe3-62af-470f-9bdb-b06f1b14c02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/0_ZePU3z1OawFEHN1iA2HBha57r29KdDO83DysbbQUG6xbo", "content": "", "creation_timestamp": "2026-09-03T00:00:38.553914Z"} https://vulnerability.circl.lu/sighting/e4da3fe3-62af-470f-9bdb-b06f1b14c02b/export Thu, 03 Sep 2026 00:00:38 +0000 https://vulnerability.circl.lu/sighting/385b251b-60d4-4ab1-8781-f86ad110442f/export {"uuid": "385b251b-60d4-4ab1-8781-f86ad110442f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/M1tcQDXp0xt9SGNq1y4EHMMYm_mdZJtAONErVuHBShI8RHI", "content": "", "creation_timestamp": "2026-09-03T00:00:37.770619Z"} {"uuid": "385b251b-60d4-4ab1-8781-f86ad110442f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "published-proof-of-concept", "source": "Telegram/M1tcQDXp0xt9SGNq1y4EHMMYm_mdZJtAONErVuHBShI8RHI", "content": "", "creation_timestamp": "2026-09-03T00:00:37.770619Z"} https://vulnerability.circl.lu/sighting/385b251b-60d4-4ab1-8781-f86ad110442f/export Thu, 03 Sep 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/1e6f5016-9129-4996-9f07-3d602818b8f6/export {"uuid": "1e6f5016-9129-4996-9f07-3d602818b8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/mohamedation.com/post/3mukbugb7af2v", "content": "CVE-2026-15981 is the miniOrange/SAML authentication bypass (the openssl_verify -1 treated as true bug). The WPMU DEV Dashboard issue that Wordfence wrote about is actually CVE-2026-76581 \u2014 the Hub SSO HMAC canonicalization confusion in versions \u2264 5.0.1.", "creation_timestamp": "2026-09-02T15:47:44.704159Z"} {"uuid": "1e6f5016-9129-4996-9f07-3d602818b8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/mohamedation.com/post/3mukbugb7af2v", "content": "CVE-2026-15981 is the miniOrange/SAML authentication bypass (the openssl_verify -1 treated as true bug). The WPMU DEV Dashboard issue that Wordfence wrote about is actually CVE-2026-76581 \u2014 the Hub SSO HMAC canonicalization confusion in versions \u2264 5.0.1.", "creation_timestamp": "2026-09-02T15:47:44.704159Z"} https://vulnerability.circl.lu/sighting/1e6f5016-9129-4996-9f07-3d602818b8f6/export Wed, 02 Sep 2026 15:47:44 +0000 https://vulnerability.circl.lu/sighting/eaa6c6c2-91d7-43d5-a51e-18c3dcc33286/export {"uuid": "eaa6c6c2-91d7-43d5-a51e-18c3dcc33286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/M1tcQDXp0xt9SGNq1y4EHMMYm_mdZJtAONErVuHBShI8RHI", "content": "", "creation_timestamp": "2026-09-02T01:00:17.720760Z"} {"uuid": "eaa6c6c2-91d7-43d5-a51e-18c3dcc33286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/M1tcQDXp0xt9SGNq1y4EHMMYm_mdZJtAONErVuHBShI8RHI", "content": "", "creation_timestamp": "2026-09-02T01:00:17.720760Z"} https://vulnerability.circl.lu/sighting/eaa6c6c2-91d7-43d5-a51e-18c3dcc33286/export Wed, 02 Sep 2026 01:00:17 +0000 https://vulnerability.circl.lu/sighting/531eec25-d9a6-4106-ba4f-541ba354e74f/export {"uuid": "531eec25-d9a6-4106-ba4f-541ba354e74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/0_ZePU3z1OawFEHN1iA2HBha57r29KdDO83DysbbQUG6xbo", "content": "", "creation_timestamp": "2026-09-02T01:00:17.438639Z"} {"uuid": "531eec25-d9a6-4106-ba4f-541ba354e74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/0_ZePU3z1OawFEHN1iA2HBha57r29KdDO83DysbbQUG6xbo", "content": "", "creation_timestamp": "2026-09-02T01:00:17.438639Z"} https://vulnerability.circl.lu/sighting/531eec25-d9a6-4106-ba4f-541ba354e74f/export Wed, 02 Sep 2026 01:00:17 +0000 https://vulnerability.circl.lu/sighting/6297a776-7cf4-4aa6-bde3-5234cbfc5ed4/export {"uuid": "6297a776-7cf4-4aa6-bde3-5234cbfc5ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-02T01:00:15.299033Z"} {"uuid": "6297a776-7cf4-4aa6-bde3-5234cbfc5ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/1rxP3qIuireobzlbCghqLtlBEvOO40pQENYobB1-OKe51is", "content": "", "creation_timestamp": "2026-09-02T01:00:15.299033Z"} https://vulnerability.circl.lu/sighting/6297a776-7cf4-4aa6-bde3-5234cbfc5ed4/export Wed, 02 Sep 2026 01:00:15 +0000 https://vulnerability.circl.lu/sighting/15339f6e-2e23-46bb-b1a0-e4a2f4510d4e/export {"uuid": "15339f6e-2e23-46bb-b1a0-e4a2f4510d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mucjn27obl2y", "content": "\ud83e\udd16 CVE-2026-76581 (CVSS 9.8): auth bypass in WPMU DEV Dashboard; critical flaws also in Avada, TranslatePress, Pods, GiveWP \u2014 WordPress site takeover or RCE possible.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T13:45:29.602207Z"} {"uuid": "15339f6e-2e23-46bb-b1a0-e4a2f4510d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mucjn27obl2y", "content": "\ud83e\udd16 CVE-2026-76581 (CVSS 9.8): auth bypass in WPMU DEV Dashboard; critical flaws also in Avada, TranslatePress, Pods, GiveWP \u2014 WordPress site takeover or RCE possible.\nhttps://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html", "creation_timestamp": "2026-08-30T13:45:29.602207Z"} https://vulnerability.circl.lu/sighting/15339f6e-2e23-46bb-b1a0-e4a2f4510d4e/export Sun, 30 Aug 2026 13:45:29 +0000 https://vulnerability.circl.lu/sighting/0bd71e06-e2b0-48c1-9c13-98a8c1827d50/export {"uuid": "0bd71e06-e2b0-48c1-9c13-98a8c1827d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-30T03:00:04.578271Z"} {"uuid": "0bd71e06-e2b0-48c1-9c13-98a8c1827d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76581", "type": "seen", "source": "Telegram/u6LonFdBj6aY3eI5Uv01hL3kq_TNTs4p8KgDEmNXusPHSQ", "content": "", "creation_timestamp": "2026-08-30T03:00:04.578271Z"} https://vulnerability.circl.lu/sighting/0bd71e06-e2b0-48c1-9c13-98a8c1827d50/export Sun, 30 Aug 2026 03:00:04 +0000