<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-23T17:34:27.596048+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ecef5eb4-1661-4198-90f0-7cefd36c728f/export</id>
    <title>ecef5eb4-1661-4198-90f0-7cefd36c728f</title>
    <updated>2026-09-23T17:34:27.622448+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ecef5eb4-1661-4198-90f0-7cefd36c728f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82187", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvzxisfbir2n", "content": "CVE-2026-82187 - web to print online designer\nThe Web to Print Online Designer plugin for WordPress does not check what kind of files are uploaded and gives out the upload token to anyone who asks. This means an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-09-21T14:50:04.964276Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ecef5eb4-1661-4198-90f0-7cefd36c728f/export"/>
    <published>2026-09-21T14:50:04.964276+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f77c0c34-f64b-4b9b-bbe2-257564bd462b/export</id>
    <title>f77c0c34-f64b-4b9b-bbe2-257564bd462b</title>
    <updated>2026-09-23T17:34:27.624566+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f77c0c34-f64b-4b9b-bbe2-257564bd462b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-82187", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvzdxn3kxj2y", "content": "Web to Print Online Designer WordPress plugin CRITICAL flaw (CVE-2026-82187): unauthenticated file upload enables remote code execution. Upgrade to 2.15.0+ immediately. https://radar.offseq.com/threat/cve-2026-82187-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-web-to-print-online-de...", "creation_timestamp": "2026-09-21T09:00:30.237211Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f77c0c34-f64b-4b9b-bbe2-257564bd462b/export"/>
    <published>2026-09-21T09:00:30.237211+00:00</published>
  </entry>
</feed>
