https://vulnerability.circl.lu/sightings/feed 2026-10-08T20:03:03.973716+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/184f4d22-4d10-4865-b420-428b4d8bcfd0/export 2026-10-08T20:03:04.003890+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "184f4d22-4d10-4865-b420-428b4d8bcfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuncvoc27", "content": "CVE-2026-41555 - newsletter subscription form \u2013 user subscriptions form, capture email\nThe Capture Email plugin for WordPress (versions up to 1.5.9) allows anyone on the internet to send specially crafted requests that run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T21:40:04.417064Z"} 2026-10-07T21:40:04.417064+00:00 https://vulnerability.circl.lu/sighting/c5c3aa17-a4d5-4fd3-9e29-3e3f6416940c/export 2026-10-08T20:03:04.006341+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c5c3aa17-a4d5-4fd3-9e29-3e3f6416940c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41555", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx7ezeyahs23", "content": "Weblizar Newsletter Subscription Form <=1.5.9 hit by CRITICAL unauthenticated SQL Injection (CVSS 9.3). Patch status unknown \u2014 disable or restrict immediately. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07...", "creation_timestamp": "2026-10-06T12:00:30.652652Z"} 2026-10-06T12:00:30.652652+00:00 https://vulnerability.circl.lu/sighting/0af92ffd-31ab-4ad3-a05a-f799b23f13f5/export 2026-10-08T20:03:04.006484+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0af92ffd-31ab-4ad3-a05a-f799b23f13f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41555", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393852207082875", "content": "Unauthenticated SQL Injection (CVE-2026-41555, CRITICAL, CVSS 9.3) in Weblizar Newsletter Subscription Form <=1.5.9 impacts WordPress sites. Patch status unknown \u2014 restrict/disable the component. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07f0f81651ae4a40 #OffSeq #WordPress #Infosec #SQLInjection", "creation_timestamp": "2026-10-06T12:00:28.822764Z"} 2026-10-06T12:00:28.822764+00:00 https://vulnerability.circl.lu/sighting/0f34e9b9-7a71-4f3b-b01a-f34e52851258/export 2026-10-08T20:03:04.006566+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0f34e9b9-7a71-4f3b-b01a-f34e52851258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41555", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tfqyqh2l", "content": "\ud83d\udea8 CVE-2026-41555 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Newsletter Subscription Form \u2013 User Subscriptions Form, Capture Email <= 1...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-41555\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:47.047529Z"} 2026-10-06T10:09:47.047529+00:00