https://vulnerability.circl.lu/sightings/feed 2026-09-13T22:47:51.474602+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/73c72b60-a28b-44cf-9514-2a2613ff5bb5/export 2026-09-13T22:47:51.498810+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "73c72b60-a28b-44cf-9514-2a2613ff5bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85681", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdkm2u2oc2r", "content": "\ud83d\udd34 CVE-2026-85681 - Critical (9.8)\n\nThe WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85681/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T17:00:42.472161Z"} 2026-09-12T17:00:42.472161+00:00 https://vulnerability.circl.lu/sighting/3471f420-a8ac-4973-9135-c32020af932e/export 2026-09-13T22:47:51.501630+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3471f420-a8ac-4973-9135-c32020af932e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdkl2tykj2j", "content": "CVE-2026-85681 - wp component\nThe WP Component WordPress plugin up to version 2.2.4 lets anyone on the internet change any setting on your site because it does not verify who is making the request. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wpcomponent #unknown #CVE #infosec", "creation_timestamp": "2026-09-12T17:00:11.560599Z"} 2026-09-12T17:00:11.560599+00:00 https://vulnerability.circl.lu/sighting/d97447b5-1322-4636-a7fb-3c7e7a61bcd0/export 2026-09-13T22:47:51.501921+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d97447b5-1322-4636-a7fb-3c7e7a61bcd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85681", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvczt6g4sa2y", "content": "WP Component \u22642.2.4 has a CRITICAL privilege flaw: unauthenticated users can overwrite site options, risking WordPress takeover. Check vendor guidance & review affected sites ASAP. https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526e...", "creation_timestamp": "2026-09-12T12:00:27.333914Z"} 2026-09-12T12:00:27.333914+00:00 https://vulnerability.circl.lu/sighting/374a0634-6b36-4d5d-8103-917dd439274f/export 2026-09-13T22:47:51.502043+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "374a0634-6b36-4d5d-8103-917dd439274f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85681", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117257956517856963", "content": "CVE-2026-85681 (CRITICAL): WP Component plugin \u22642.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam", "creation_timestamp": "2026-09-12T12:00:25.164881Z"} 2026-09-12T12:00:25.164881+00:00