https://vulnerability.circl.lu/sightings/feed 2026-10-11T03:00:30.628236+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d3ffdc0d-4360-4808-ad7b-26c6fce5b66d/export 2026-10-11T03:00:30.655038+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d3ffdc0d-4360-4808-ad7b-26c6fce5b66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxkp4tbnht2j", "content": "VillaTheme AFFI for WooCommerce (<=1.0.10) hit by CRITICAL deserialization bug (CVE-2026-104398) \ud83d\uded1 Allows remote code execution, no auth needed. Disable or restrict plugin use until fixed. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-villatheme-affi-affiliate...", "creation_timestamp": "2026-10-11T00:00:41.001811Z"} 2026-10-11T00:00:41.001811+00:00 https://vulnerability.circl.lu/sighting/c262e7f3-24f0-4ed9-8ac4-b37ee09f0550/export 2026-10-11T03:00:30.658403+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c262e7f3-24f0-4ed9-8ac4-b37ee09f0550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117419333265810798", "content": "Deserialization of untrusted data in VillaTheme AFFI for WooCommerce (<=1.0.10) \u2014 CVE-2026-104398 (CRITICAL, CVSS 9.8) enables remote code execution with no auth/user input. Restrict or remove plugin until patched. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-villatheme-affi-affiliate-marketing-for-woocommerce-3d8236ba80fe5b3c #OffSeq #CVE2026104398 #WordPress #Infosec", "creation_timestamp": "2026-10-11T00:00:40.588721Z"} 2026-10-11T00:00:40.588721+00:00 https://vulnerability.circl.lu/sighting/a9050c77-257d-4b81-9cf1-bf7d8a0d41d6/export 2026-10-11T03:00:30.658540+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a9050c77-257d-4b81-9cf1-bf7d8a0d41d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxkgrz3ii72p", "content": "WooCommerce\u7528AFFI\u30d7\u30e9\u30b0\u30a4\u30f3\uff08\uff5e1.0.10\uff09\u306b\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30bc\u30fc\u30b7\u30e7\u30f3\u306b\u3088\u308b\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-104398 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-10-10T21:31:27.512365Z"} 2026-10-10T21:31:27.512365+00:00 https://vulnerability.circl.lu/sighting/4fef0c1b-543f-4199-b6cd-f337b2d671a3/export 2026-10-11T03:00:30.658664+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4fef0c1b-543f-4199-b6cd-f337b2d671a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju7uhs2n", "content": "1. CVE-2026-104398 \u00b7 3 people\n\ud83d\udfe5 Critical 9.8 \u00b7 VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerce\n\nWordPress AFFI \u2013 Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability", "creation_timestamp": "2026-10-10T18:27:57.776514Z"} 2026-10-10T18:27:57.776514+00:00 https://vulnerability.circl.lu/sighting/8004960e-3481-4925-bdd6-961e7bdad41a/export 2026-10-11T03:00:30.658762+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8004960e-3481-4925-bdd6-961e7bdad41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju6bos2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-104398 \u00b7 3 people\n2. CVE-2026-105889 \u00b7 2 people\n3. CVE-2026-93945 \u00b7 2 people\n4. CVE-2026-102126 \u00b7 1 person\n5. CVE-2026-103071 \u00b7 1 person\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "creation_timestamp": "2026-10-10T18:27:57.134186Z"} 2026-10-10T18:27:57.134186+00:00 https://vulnerability.circl.lu/sighting/cef28b82-f489-4e84-bf92-9f80c37c83fe/export 2026-10-11T03:00:30.658865+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cef28b82-f489-4e84-bf92-9f80c37c83fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxk3jxnsam2l", "content": "CVE-2026-104398 - affi \u2013 affiliate marketing for woocommerce\nThe AFFI \u2013 Affiliate Marketing for WooCommerce plugin for WordPress (versions up to 1.0.10) can be tricked into processing crafted data, which may let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#villatheme #CVE #infosec", "creation_timestamp": "2026-10-10T18:10:06.164644Z"} 2026-10-10T18:10:06.164644+00:00 https://vulnerability.circl.lu/sighting/5c2cafd6-81c4-4a4f-89b5-26af37f9159e/export 2026-10-11T03:00:30.658967+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5c2cafd6-81c4-4a4f-89b5-26af37f9159e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxk3eswq4s2l", "content": "\ud83d\udea8 CVE-2026-104398 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerce af...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104398\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T18:07:13.542149Z"} 2026-10-10T18:07:13.542149+00:00 https://vulnerability.circl.lu/sighting/b71aa39d-4ea3-4c1b-8782-b8732d111bd2/export 2026-10-11T03:00:30.659063+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b71aa39d-4ea3-4c1b-8782-b8732d111bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk2yekknc2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-103071 \u00b7 1 person\n2. CVE-2026-104398 \u00b7 1 person\n3. CVE-2026-108161 \u00b7 1 person", "creation_timestamp": "2026-10-10T18:00:16.551785Z"} 2026-10-10T18:00:16.551785+00:00 https://vulnerability.circl.lu/sighting/9b20dd26-953c-4164-95d2-fca8e29819e3/export 2026-10-11T03:00:30.659158+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9b20dd26-953c-4164-95d2-fca8e29819e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/boe2lqss36rsv", "content": "CVE-2026-104398 - WordPress AFFI \u2013 Affiliate Marketing for WooCommerce plugin\nCVE ID : CVE-2026-104398\n \n Published : Oct. 10, 2026, 5 p.m. | 22\u00a0minutes ago\n \n Description : Deserialization of Untrusted Data vulnerability in VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerc...", "creation_timestamp": "2026-10-10T17:49:09.761009Z"} 2026-10-10T17:49:09.761009+00:00 https://vulnerability.circl.lu/sighting/3c9d32d9-5883-43a8-8f4f-732fd5fc21d4/export 2026-10-11T03:00:30.659253+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3c9d32d9-5883-43a8-8f4f-732fd5fc21d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxjzfqtmac2e", "content": "\ud83d\udd34 CVE-2026-104398 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in VillaTheme AFFI \u2013 Affiliate Marketing for Wo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104398/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T17:31:57.706305Z"} 2026-10-10T17:31:57.706305+00:00