<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-26T02:10:39.352170+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9f6b434-05bc-4b83-b3cc-2a780d6536d3/export</id>
    <title>d9f6b434-05bc-4b83-b3cc-2a780d6536d3</title>
    <updated>2026-08-26T02:10:39.369011+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9f6b434-05bc-4b83-b3cc-2a780d6536d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtvgs7qb432e", "content": "CVE-2026-78477 - jawn\nAll versions of the Jawn theme for WordPress up to 1.4.2 allow anyone on the internet to gain administrator rights on your site. This means an attacker could change settings, add\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jawn #mvpthemes #CVE #infosec", "creation_timestamp": "2026-08-25T08:50:05.141020Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9f6b434-05bc-4b83-b3cc-2a780d6536d3/export"/>
    <published>2026-08-25T08:50:05.141020+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/152d2b84-053b-4348-bd9b-b50a31354b3b/export</id>
    <title>152d2b84-053b-4348-bd9b-b50a31354b3b</title>
    <updated>2026-08-26T02:10:39.371571+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "152d2b84-053b-4348-bd9b-b50a31354b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvegbtykq23", "content": "\ud83d\udea8 CVE-2026-78477 \u2014 CVSS 9.8 CRITICAL\n\nThe Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78477\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T08:07:37.255382Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/152d2b84-053b-4348-bd9b-b50a31354b3b/export"/>
    <published>2026-08-25T08:07:37.255382+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8e2169d6-a7ed-45a3-98e7-8099ef2c6841/export</id>
    <title>8e2169d6-a7ed-45a3-98e7-8099ef2c6841</title>
    <updated>2026-08-26T02:10:39.371669+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8e2169d6-a7ed-45a3-98e7-8099ef2c6841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hix4ievbl5oww", "content": "CVE-2026-78477 - Jawn\nCVE ID : CVE-2026-78477\n \n Published : Aug. 25, 2026, 5:31 a.m. | 20\u00a0minutes ago\n \n Description : The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated at...", "creation_timestamp": "2026-08-25T06:34:31.205337Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8e2169d6-a7ed-45a3-98e7-8099ef2c6841/export"/>
    <published>2026-08-25T06:34:31.205337+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/baa63a68-486a-4488-a365-5d56ae5e7503/export</id>
    <title>baa63a68-486a-4488-a365-5d56ae5e7503</title>
    <updated>2026-08-26T02:10:39.371744+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "baa63a68-486a-4488-a365-5d56ae5e7503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78477", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtv5cuxhfr2w", "content": "MVPThemes Jawn for WordPress has a CRITICAL privilege escalation flaw (CVE-2026-78477) in all versions \u22641.4.2. Unauth attackers can gain admin rights. Audit your sites now. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #Of...", "creation_timestamp": "2026-08-25T06:00:27.578305Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/baa63a68-486a-4488-a365-5d56ae5e7503/export"/>
    <published>2026-08-25T06:00:27.578305+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/23057d9d-77d5-4afa-bd7e-b125f10984f5/export</id>
    <title>23057d9d-77d5-4afa-bd7e-b125f10984f5</title>
    <updated>2026-08-26T02:10:39.371815+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "23057d9d-77d5-4afa-bd7e-b125f10984f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78477", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117154619350415458", "content": "Privilege escalation vuln (CRITICAL, CVSS 9.8) in MVPThemes Jawn WordPress theme (\u22641.4.2): CVE-2026-78477 lets unauth users elevate to admin. Review deployments &amp;amp; monitor for fixes. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #OffSeq #WordPress #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-08-25T06:00:25.077697Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/23057d9d-77d5-4afa-bd7e-b125f10984f5/export"/>
    <published>2026-08-25T06:00:25.077697+00:00</published>
  </entry>
</feed>
