https://vulnerability.circl.lu/sightings/feed 2026-07-16T20:44:43.872165+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/632ae611-92c1-4e5c-a051-4d3729af6914/export 2026-07-16T20:44:43.894878+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "632ae611-92c1-4e5c-a051-4d3729af6914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12997", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mqqkp3t52c2u", "content": "CVE-2026-12997. Gravity Forms up to 2.10.4. Directory traversal. Any visitor reads wp-config.php, database credentials, everything. CVSS 7.5. No auth needed.\n\nUpdate to 2.10.4 immediately.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #LFI #CyberSecurity", "creation_timestamp": "2026-07-16T06:01:01.543512Z"} 2026-07-16T06:01:01.543512+00:00 https://vulnerability.circl.lu/sighting/c9c19048-bd5a-41de-9bc5-d8486bf4515e/export 2026-07-16T20:44:43.898276+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c9c19048-bd5a-41de-9bc5-d8486bf4515e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12997", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpmceqwmg2m", "content": "CVE-2026-12997 - Gravity Forms\nCVE ID : CVE-2026-12997\n \n Published : July 15, 2026, 7:16 p.m. | 17\u00a0minutes ago\n \n Description : The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.10.4 via the 'gform_uploaded_fil...", "creation_timestamp": "2026-07-15T20:57:06.658341Z"} 2026-07-15T20:57:06.658341+00:00