<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T22:14:31.820290+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/076c690c-2112-4351-97f2-3bfc40702a8f/export</id>
    <title>076c690c-2112-4351-97f2-3bfc40702a8f</title>
    <updated>2026-10-11T22:14:31.838227+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "076c690c-2112-4351-97f2-3bfc40702a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103694", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxlzfphqjx2x", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cMobile builder\u300dv1.4.2\u4ee5\u524d\u306f\u3001\u30ed\u30b0\u30a4\u30f3\u30e6\u30fc\u30b6\u30fc\u304cREST API\u7d4c\u7531\u3067\u30e6\u30fc\u30b6\u30fc\u30e1\u30bf\u30ad\u30fc\u3092\u66f4\u65b0\u3067\u304d\u308b\u5236\u9650\u304c\u4e0d\u5341\u5206\u3002\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u4e00\u822c\u30e6\u30fc\u30b6\u30fc\u304c\u81ea\u8eab\u3092\u7ba1\u2026\nCVE-2026-103694 CVSS 8.8 | HIGH", "creation_timestamp": "2026-10-11T12:37:15.485034Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/076c690c-2112-4351-97f2-3bfc40702a8f/export"/>
    <published>2026-10-11T12:37:15.485034+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/02048f85-e1b5-4de0-9f9b-1744544567d6/export</id>
    <title>02048f85-e1b5-4de0-9f9b-1744544567d6</title>
    <updated>2026-10-11T22:14:31.839932+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "02048f85-e1b5-4de0-9f9b-1744544567d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103694", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420845968693297", "content": "CVE-2026-103694 Mobile builder &amp;lt;= 1.4.2 - Subscriber+ Privilege Escalation to Admin The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.\nhttps://www.cve.org/CVERecord?id=CVE-2026-103694https://wpscan.com/vulnerability/5d087920-26f3-4c71-bfcb-ae9a70cc407f/#CVE_2026_103694#bot", "creation_timestamp": "2026-10-11T06:25:20.622954Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/02048f85-e1b5-4de0-9f9b-1744544567d6/export"/>
    <published>2026-10-11T06:25:20.622954+00:00</published>
  </entry>
</feed>
