<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-01T22:39:48.419158+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7de44a45-2ddc-4ef0-87d4-e2ec37490470/export</id>
    <title>7de44a45-2ddc-4ef0-87d4-e2ec37490470</title>
    <updated>2026-09-01T22:39:48.441682+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7de44a45-2ddc-4ef0-87d4-e2ec37490470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://t.me/captainsmok3r_official/515", "content": "CVE-2026-15369-\n Custom User Registration Fields for WooCommerce &amp;lt;= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout", "creation_timestamp": "2026-09-01T00:00:08.347408Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7de44a45-2ddc-4ef0-87d4-e2ec37490470/export"/>
    <published>2026-09-01T00:00:08.347408+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f46d703d-d908-4d6d-aebd-3d1b900f0b6d/export</id>
    <title>f46d703d-d908-4d6d-aebd-3d1b900f0b6d</title>
    <updated>2026-09-01T22:39:48.443691+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f46d703d-d908-4d6d-aebd-3d1b900f0b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://t.me/captainsmok3r_official/515", "content": "CVE-2026-15369-\n Custom User Registration Fields for WooCommerce &amp;lt;= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout", "creation_timestamp": "2026-08-31T23:00:03.328341Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f46d703d-d908-4d6d-aebd-3d1b900f0b6d/export"/>
    <published>2026-08-31T23:00:03.328341+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/22416e67-6627-45a0-9bdf-25e3b649c87b/export</id>
    <title>22416e67-6627-45a0-9bdf-25e3b649c87b</title>
    <updated>2026-09-01T22:39:48.443925+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "22416e67-6627-45a0-9bdf-25e3b649c87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mudkkxgngn2x", "content": "CVE-2026-15369 is trending. Hype score 4, currently #7 on cvemon.\n\nThe Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-15369", "creation_timestamp": "2026-08-30T23:34:52.975059Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/22416e67-6627-45a0-9bdf-25e3b649c87b/export"/>
    <published>2026-08-30T23:34:52.975059+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/991747aa-60df-4e40-98dd-3e56f045928e/export</id>
    <title>991747aa-60df-4e40-98dd-3e56f045928e</title>
    <updated>2026-09-01T22:39:48.444093+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "991747aa-60df-4e40-98dd-3e56f045928e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mub6vfewxv2o", "content": "\ud83d\udd34 CVE-2026-15369 - Critical (9.8)\n\nThe Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privile...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15369/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T01:00:39.399424Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/991747aa-60df-4e40-98dd-3e56f045928e/export"/>
    <published>2026-08-30T01:00:39.399424+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/13e69f75-1b62-4071-bd93-1fa0d6d0f919/export</id>
    <title>13e69f75-1b62-4071-bd93-1fa0d6d0f919</title>
    <updated>2026-09-01T22:39:48.444269+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "13e69f75-1b62-4071-bd93-1fa0d6d0f919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mub5ujazp22i", "content": "One WooCommerce Plugin, One Admin Button, Infinite Corporate Regret\nPANIC 82% | Lag 0.0h | CVE-2026-15369 affects Custom User Registration Fields for WooCommerce up to 2.2.3. Anyone able to p\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-30T00:42:15.773066Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/13e69f75-1b62-4071-bd93-1fa0d6d0f919/export"/>
    <published>2026-08-30T00:42:15.773066+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8177e628-0a3a-40a2-a485-f5d4341030b1/export</id>
    <title>8177e628-0a3a-40a2-a485-f5d4341030b1</title>
    <updated>2026-09-01T22:39:48.444424+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "8177e628-0a3a-40a2-a485-f5d4341030b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15369", "content": "", "creation_timestamp": "2026-08-30T00:15:04.041341Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8177e628-0a3a-40a2-a485-f5d4341030b1/export"/>
    <published>2026-08-30T00:15:04.041341+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c85449b8-8b0d-4a49-b986-7c2930e5b5ae/export</id>
    <title>c85449b8-8b0d-4a49-b986-7c2930e5b5ae</title>
    <updated>2026-09-01T22:39:48.445835+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c85449b8-8b0d-4a49-b986-7c2930e5b5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mub2fdghkh2t", "content": "CVE-2026-15369\nThe Custom User Registration Fields for WooCommerce plugin (versions up to 2.2.3) lets anyone who can place an order assign themselves any user role, including Administrator. This happens because the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T23:40:04.568870Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c85449b8-8b0d-4a49-b986-7c2930e5b5ae/export"/>
    <published>2026-08-29T23:40:04.568870+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0b0c658d-9ee3-4de0-8af5-aedcd71d3e82/export</id>
    <title>0b0c658d-9ee3-4de0-8af5-aedcd71d3e82</title>
    <updated>2026-09-01T22:39:48.445932+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0b0c658d-9ee3-4de0-8af5-aedcd71d3e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muav7cop6425", "content": "\ud83d\udea8 CVE-2026-15369 \u2014 CVSS 9.8 CRITICAL\n\nThe Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-15369\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T22:07:13.944765Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0b0c658d-9ee3-4de0-8af5-aedcd71d3e82/export"/>
    <published>2026-08-29T22:07:13.944765+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a5a871b6-3a5c-4e1d-a910-aeea39ed2490/export</id>
    <title>a5a871b6-3a5c-4e1d-a910-aeea39ed2490</title>
    <updated>2026-09-01T22:39:48.446007+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a5a871b6-3a5c-4e1d-a910-aeea39ed2490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/avyl7vh7eemf3", "content": "CVE-2026-15369 - Custom User Registration Fields for WooCommerce\nCVE ID : CVE-2026-15369\n \n Published : Aug. 29, 2026, 8:16 p.m. | 19\u00a0minutes ago\n \n Description : The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in ...", "creation_timestamp": "2026-08-29T20:39:44.928645Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a5a871b6-3a5c-4e1d-a910-aeea39ed2490/export"/>
    <published>2026-08-29T20:39:44.928645+00:00</published>
  </entry>
</feed>
