https://vulnerability.circl.lu/sightings/feed 2026-09-27T07:37:27.764965+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5d3d75d4-2f8f-46fd-8e7a-8134fde584c9/export 2026-09-27T07:37:27.792176+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5d3d75d4-2f8f-46fd-8e7a-8134fde584c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhsng7xlp2j", "content": "miniOrange OTP Login plugin (\u22645.5.5) hit by CRITICAL auth bypass (CVE-2026-85984). Admin login possible with username only if risky options are enabled. Disable those settings ASAP. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-...", "creation_timestamp": "2026-09-27T03:00:28.069730Z"} 2026-09-27T03:00:28.069730+00:00 https://vulnerability.circl.lu/sighting/7af375d4-347d-4a73-bf9b-c08b3af70c81/export 2026-09-27T07:37:27.795490+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7af375d4-347d-4a73-bf9b-c08b3af70c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340767866919057", "content": "CVE-2026-85984: CRITICAL auth bypass in miniOrange OTP Login plugin \u22645.5.5. Attackers can log in as admin with just a username if certain options are enabled. Disable risky settings and check vendor guidance. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-verification-and-5c3999015784c4c9 #OffSeq #WordPress #CVE202685984", "creation_timestamp": "2026-09-27T03:00:26.254737Z"} 2026-09-27T03:00:26.254737+00:00 https://vulnerability.circl.lu/sighting/90425d28-2bb7-425f-b23e-1c200cabdc14/export 2026-09-27T07:37:27.795657+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "90425d28-2bb7-425f-b23e-1c200cabdc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhhtu7qqz2m", "content": "\ud83d\udd34 CVE-2026-85984 - Critical (9.8)\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85984/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T23:47:13.105166Z"} 2026-09-26T23:47:13.105166+00:00 https://vulnerability.circl.lu/sighting/ea363b39-fa6a-44ab-b5ee-dde51a810936/export 2026-09-27T07:37:27.795773+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ea363b39-fa6a-44ab-b5ee-dde51a810936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhdjwsepw2o", "content": "CVE-2026-85984 - miniorange otp login, verification and sms notifications\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress can let someone sign in as an administrator without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cyberlord92 #CVE #infosec", "creation_timestamp": "2026-09-26T22:30:04.585847Z"} 2026-09-26T22:30:04.585847+00:00 https://vulnerability.circl.lu/sighting/ea67f3ab-8f20-4918-a3fd-c780a17dd7db/export 2026-09-27T07:37:27.795890+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ea67f3ab-8f20-4918-a3fd-c780a17dd7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwh6pbek3j2h", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cminiOrange OTP Login, Verification and SMS Notifications\u300d\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u7ba1\u7406\u8005\u304c\u7279\u5b9a\u8a2d\u5b9a\u2026\nCVE-2026-85984 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-26T21:03:34.709701Z"} 2026-09-26T21:03:34.709701+00:00 https://vulnerability.circl.lu/sighting/bc65c39f-cf89-444b-b7a6-20f1d3c79dc6/export 2026-09-27T07:37:27.796016+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bc65c39f-cf89-444b-b7a6-20f1d3c79dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwh3lobomz2r", "content": "\ud83d\udea8 CVE-2026-85984 \u2014 CVSS 9.8 CRITICAL\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85984\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T20:07:52.676531Z"} 2026-09-26T20:07:52.676531+00:00