https://vulnerability.circl.lu/sightings/feed 2026-09-28T13:19:34.210337+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5ee2f736-296e-43f0-8ce9-25cc0db85b99/export 2026-09-28T13:19:34.237548+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5ee2f736-296e-43f0-8ce9-25cc0db85b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81655", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwkbj5tibq27", "content": "\ud83d\udfe0 CVE-2026-81655 - High (7.5)\n\nThe Ad Inserter WordPress plugin before 2.8.19 does not correctly restrict access to one of its ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81655/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-28T02:31:51.509602Z"} 2026-09-28T02:31:51.509602+00:00 https://vulnerability.circl.lu/sighting/d768f01c-e349-4c78-befc-a73c81ced970/export 2026-09-28T13:19:34.240160+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d768f01c-e349-4c78-befc-a73c81ced970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81655", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwils2melc2q", "content": "Ad Inserter plugin (WP, 2.8.12 \u2013 2.8.18) hit by CRITICAL code injection. Subscriber users can run PHP or serve XSS. Upgrade to 2.8.19+ now. https://radar.offseq.com/threat/cve-2026-81655-cwe-94-improper-control-of-generation-of-code-code-injection-in-ad-inserter-d330f89b1f759aca #OffSeq #WordPres...", "creation_timestamp": "2026-09-27T10:30:27.249962Z"} 2026-09-27T10:30:27.249962+00:00 https://vulnerability.circl.lu/sighting/7bd66486-6ea1-45d7-858d-c1bc69a251dd/export 2026-09-28T13:19:34.240376+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7bd66486-6ea1-45d7-858d-c1bc69a251dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-81655", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117342537275229081", "content": "CVE-2026-81655: CRITICAL code injection in Ad Inserter WP plugin (2.8.12 \u2013 2.8.18). Subscribers can execute PHP or unescaped content. Patch to 2.8.19+ ASAP. More: https://radar.offseq.com/threat/cve-2026-81655-cwe-94-improper-control-of-generation-of-code-code-injection-in-ad-inserter-d330f89b1f759aca #OffSeq #WordPress #Infosec #Vuln", "creation_timestamp": "2026-09-27T10:30:25.149394Z"} 2026-09-27T10:30:25.149394+00:00