https://vulnerability.circl.lu/sightings/feed 2026-05-06T08:57:27.608979+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c4de310f-ef58-40b2-8373-2eac46b6124e/export 2026-05-06T08:57:28.008663+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "c4de310f-ef58-40b2-8373-2eac46b6124e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4714", "type": "seen", "source": "https://t.me/cibsecurity/58568", "content": "\u203c CVE-2022-4714 \u203c\n\nThe WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:40.000000Z"} 2023-02-21T12:16:40+00:00 https://vulnerability.circl.lu/sighting/9ec0a44e-b75d-4a66-9492-b98f0216d45d/export 2026-05-06T08:57:28.008566+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "9ec0a44e-b75d-4a66-9492-b98f0216d45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47148", "type": "seen", "source": "https://t.me/cibsecurity/59242", "content": "\u203c CVE-2022-47148 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3.2.5 leading to popup dismiss.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T18:33:43.000000Z"} 2023-03-01T18:33:43+00:00 https://vulnerability.circl.lu/sighting/606d23c7-cb5e-4f49-a27f-5b500108e1a5/export 2026-05-06T08:57:28.008469+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "606d23c7-cb5e-4f49-a27f-5b500108e1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47143", "type": "seen", "source": "https://t.me/cibsecurity/59951", "content": "\u203c CVE-2022-47143 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin \u00e2\u20ac\u201c MPG plugin <= 3.3.9 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-14T12:54:10.000000Z"} 2023-03-14T12:54:10+00:00 https://vulnerability.circl.lu/sighting/6aaba47d-2c9a-4d9c-8839-a4f31ce2455a/export 2026-05-06T08:57:28.008377+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "6aaba47d-2c9a-4d9c-8839-a4f31ce2455a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47141", "type": "seen", "source": "https://t.me/cibsecurity/59952", "content": "\u203c CVE-2022-47141 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Seerox WP Dynamic Keywords Injector plugin <= 2.3.15 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-14T12:54:11.000000Z"} 2023-03-14T12:54:11+00:00 https://vulnerability.circl.lu/sighting/388a7700-38da-487d-a970-d60c5ee99f5c/export 2026-05-06T08:57:28.008291+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "388a7700-38da-487d-a970-d60c5ee99f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47145", "type": "seen", "source": "https://t.me/cibsecurity/60588", "content": "\u203c CVE-2022-47145 \u203c\n\nReflected Cross-Site Scripting (XSS) vulnerability in Blockonomics WordPress Bitcoin Payments \u00e2\u20ac\u201c Blockonomics plugin <= 3.5.7 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T19:36:47.000000Z"} 2023-03-23T19:36:47+00:00 https://vulnerability.circl.lu/sighting/15bf59e3-b252-4320-984c-4f739ba31864/export 2026-05-06T08:57:28.008201+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "15bf59e3-b252-4320-984c-4f739ba31864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47146", "type": "seen", "source": "https://t.me/cibsecurity/60777", "content": "\u203c CVE-2022-47146 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T18:19:57.000000Z"} 2023-03-27T18:19:57+00:00 https://vulnerability.circl.lu/sighting/547745b9-aeab-47bd-979f-b365b21e7c00/export 2026-05-06T08:57:28.008083+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "547745b9-aeab-47bd-979f-b365b21e7c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47142", "type": "seen", "source": "https://t.me/cibsecurity/64509", "content": "\u203c CVE-2022-47142 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Plugincraft Mediamatic \u00e2\u20ac\u201c Media Library Folders plugin <=\u00c2\u00a02.8.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T12:25:31.000000Z"} 2023-05-22T12:25:31+00:00 https://vulnerability.circl.lu/sighting/e1faba3e-3788-4a2b-ba7b-648735cb1d4f/export 2026-05-06T08:57:28.006388+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "e1faba3e-3788-4a2b-ba7b-648735cb1d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4714", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14911", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4714\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack\n\ud83d\udccf Published: 2023-02-21T08:51:04.598Z\n\ud83d\udccf Modified: 2025-05-05T16:11:27.958Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/61b475f1-bbfb-4450-a3b2-b8caf5df2340", "creation_timestamp": "2025-05-05T16:20:03.000000Z"} 2025-05-05T16:20:03+00:00