<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-19T14:18:23.538177+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4a89aa89-2ff7-4e75-996b-46ce1918881f/export</id>
    <title>4a89aa89-2ff7-4e75-996b-46ce1918881f</title>
    <updated>2026-09-19T14:18:23.557748+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4a89aa89-2ff7-4e75-996b-46ce1918881f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvu5k5jzrh2k", "content": "\ud83d\udd34 CVE-2026-92229 - Critical (9.1)\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form &amp;amp; Custom Form Builder plugin for WordPres...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-92229/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:22:14.306937Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4a89aa89-2ff7-4e75-996b-46ce1918881f/export"/>
    <published>2026-09-19T07:22:14.306937+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/53d814ad-d61a-48e5-8ecb-a211584ed549/export</id>
    <title>53d814ad-d61a-48e5-8ecb-a211584ed549</title>
    <updated>2026-09-19T14:18:23.560215+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "53d814ad-d61a-48e5-8ecb-a211584ed549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4jakjo52b", "content": "\ud83d\udd34 CVE-2026-92229 - Critical (9.1)\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form &amp;amp; Custom Form Builder plugin for WordPres...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92229/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:03:51.858521Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/53d814ad-d61a-48e5-8ecb-a211584ed549/export"/>
    <published>2026-09-19T07:03:51.858521+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7da7d550-85a3-472c-95b5-dad30326a91d/export</id>
    <title>7da7d550-85a3-472c-95b5-dad30326a91d</title>
    <updated>2026-09-19T14:18:23.560499+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7da7d550-85a3-472c-95b5-dad30326a91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvu36tepbc2r", "content": "CVE-2026-92229\nThe Forminator Forms plugin for WordPress (all versions up to 1.57.2) can let anyone on the internet cause the site to run hidden code snippets called shortcodes. This could let attackers display unwanted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-19T06:40:06.746002Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7da7d550-85a3-472c-95b5-dad30326a91d/export"/>
    <published>2026-09-19T06:40:06.746002+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c2259acb-58c8-420e-8242-a79bd5ff07cd/export</id>
    <title>c2259acb-58c8-420e-8242-a79bd5ff07cd</title>
    <updated>2026-09-19T14:18:23.560734+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c2259acb-58c8-420e-8242-a79bd5ff07cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92229", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvttwwno3z2e", "content": "CRITICAL: wpmudev Forminator Forms plugin (\u22641.57.2) vulnerable to code injection \u2014 unauthenticated attackers can execute arbitrary shortcodes. Restrict or disable until patched. https://radar.offseq.com/threat/cve-2026-92229-cwe-94-improper-control-of-generation-of-code-code-injection-in-wpmudev-...", "creation_timestamp": "2026-09-19T04:30:27.309488Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c2259acb-58c8-420e-8242-a79bd5ff07cd/export"/>
    <published>2026-09-19T04:30:27.309488+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9125e82e-33a1-428f-9c56-3c3c212f07cb/export</id>
    <title>9125e82e-33a1-428f-9c56-3c3c212f07cb</title>
    <updated>2026-09-19T14:18:23.560944+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9125e82e-33a1-428f-9c56-3c3c212f07cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92229", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117295823161676364", "content": "CVE-2026-92229: CRITICAL code injection in wpmudev Forminator Forms plugin (\u22641.57.2). Unauthenticated attackers can execute arbitrary shortcodes, risking full WordPress site compromise. Restrict or disable plugin now. https://radar.offseq.com/threat/cve-2026-92229-cwe-94-improper-control-of-generation-of-code-code-injection-in-wpmudev-forminator-8ac627c2b84841fc #OffSeq #WordPress #CVE202692229", "creation_timestamp": "2026-09-19T04:30:24.251891Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9125e82e-33a1-428f-9c56-3c3c212f07cb/export"/>
    <published>2026-09-19T04:30:24.251891+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/80e4e5fe-b3a7-4725-82b9-90c00de1d853/export</id>
    <title>80e4e5fe-b3a7-4725-82b9-90c00de1d853</title>
    <updated>2026-09-19T14:18:23.561163+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "80e4e5fe-b3a7-4725-82b9-90c00de1d853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92229", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvtso26brn2b", "content": "\ud83d\udea8 CVE-2026-92229 \u2014 CVSS 9.1 CRITICAL\n\nThe The Forminator Forms \u2013 Contact Form, Payment Form &amp;amp; Custom Form Builder plugin for WordPress is vulnera...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92229\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T04:07:33.569490Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/80e4e5fe-b3a7-4725-82b9-90c00de1d853/export"/>
    <published>2026-09-19T04:07:33.569490+00:00</published>
  </entry>
</feed>
