<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-25T03:46:42.194333+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1c16f872-cd85-45c1-aa20-4a9612754bf3/export</id>
    <title>1c16f872-cd85-45c1-aa20-4a9612754bf3</title>
    <updated>2026-08-25T03:46:42.218101+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1c16f872-cd85-45c1-aa20-4a9612754bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0551", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtqggvafhz24", "content": "buildwps PPWP \u2013 Password Protect Pages (&amp;lt;=1.9.18) has a HIGH severity PHP object injection flaw. Contributor+ users at risk if vulnerable POP chains exist. Restrict access &amp;amp; check patch info. https://radar.offseq.com/threat/cve-2026-0551-cwe-502-deserialization-of-untrusted-data-in-buildwps-ppwp-...", "creation_timestamp": "2026-08-23T09:00:26.862728Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1c16f872-cd85-45c1-aa20-4a9612754bf3/export"/>
    <published>2026-08-23T09:00:26.862728+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/950aeb53-f779-4821-ac0f-7a5f5322be46/export</id>
    <title>950aeb53-f779-4821-ac0f-7a5f5322be46</title>
    <updated>2026-08-25T03:46:42.219993+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "950aeb53-f779-4821-ac0f-7a5f5322be46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0551", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117144002488360739", "content": "CVE-2026-0551: HIGH severity deserialization vulnerability in buildwps PPWP \u2013 Password Protect Pages (&amp;lt;=1.9.18). Contributor+ users can inject PHP objects if a POP chain exists in other plugins/themes. Review access &amp;amp; patch status. https://radar.offseq.com/threat/cve-2026-0551-cwe-502-deserialization-of-untrusted-data-in-buildwps-ppwp-password-protect-pages-dde9c11a2d958ff8 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-08-23T09:00:24.629666Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/950aeb53-f779-4821-ac0f-7a5f5322be46/export"/>
    <published>2026-08-23T09:00:24.629666+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/df054f60-a8f8-40f4-8183-9488533d72c0/export</id>
    <title>df054f60-a8f8-40f4-8183-9488533d72c0</title>
    <updated>2026-08-25T03:46:42.220169+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "df054f60-a8f8-40f4-8183-9488533d72c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0551", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtplnlf2ig2m", "content": "\ud83d\udfe0 CVE-2026-0551 - High (8.8)\n\nThe PPWP \u2013 Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-0551/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T01:01:00.083945Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/df054f60-a8f8-40f4-8183-9488533d72c0/export"/>
    <published>2026-08-23T01:01:00.083945+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce2fea39-6cae-4d28-a81e-8278f1b3c4b9/export</id>
    <title>ce2fea39-6cae-4d28-a81e-8278f1b3c4b9</title>
    <updated>2026-08-25T03:46:42.220298+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce2fea39-6cae-4d28-a81e-8278f1b3c4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0551", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cn352xtwkqoz6", "content": "CVE-2026-0551 - PPWP \u2013 Password Protect Pages\nCVE ID : CVE-2026-0551\n \n Published : Aug. 22, 2026, 11:27 p.m. | 32\u00a0minutes ago\n \n Description : The PPWP \u2013 Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1....", "creation_timestamp": "2026-08-23T00:30:23.139350Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce2fea39-6cae-4d28-a81e-8278f1b3c4b9/export"/>
    <published>2026-08-23T00:30:23.139350+00:00</published>
  </entry>
</feed>
