https://vulnerability.circl.lu/sightings/feed 2026-06-09T15:48:14.582659+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/068741bc-30a6-4ca9-a533-1e3b34aabd47/export 2026-06-09T15:48:17.015669+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "068741bc-30a6-4ca9-a533-1e3b34aabd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7330", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116538135511321220", "content": "\ud83d\udee1\ufe0f CVE-2026-7330: HIGH severity stored XSS in thedark Auto Affiliate Links (\u22646.8.8) lets unauthenticated attackers inject scripts via AJAX endpoint. WP admins at risk \u2014 update/disable plugin! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #Infosec #XSS", "creation_timestamp": "2026-05-08T09:00:29.100807Z"} 2026-05-08T09:00:29.100807+00:00 https://vulnerability.circl.lu/sighting/4cb5e13d-497f-45e8-b621-48d389a89517/export 2026-06-09T15:48:17.015543+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4cb5e13d-497f-45e8-b621-48d389a89517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7330", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mldekif4rj2y", "content": "HIGH severity XSS in thedark Auto Affiliate Links (\u22646.8.8) allows unauthenticated script injection into WP admin stats. Update or disable plugin immediately! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-08T09:00:30.644159Z"} 2026-05-08T09:00:30.644159+00:00 https://vulnerability.circl.lu/sighting/44b018a6-db4f-47a8-b0bb-416fb45d974f/export 2026-06-09T15:48:17.005231+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "44b018a6-db4f-47a8-b0bb-416fb45d974f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlds63aujy2h", "content": "CVE-2026-7330 - Auto Affiliate Links\nCVE ID : CVE-2026-7330\n \n Published : May 8, 2026, 9:16 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This i...", "creation_timestamp": "2026-05-08T13:04:05.999970Z"} 2026-05-08T13:04:05.999970+00:00