<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-06T22:38:04.192087+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9f965353-aa55-4650-b20b-e9e0a3e443e0/export</id>
    <title>9f965353-aa55-4650-b20b-e9e0a3e443e0</title>
    <updated>2026-08-06T22:38:04.233123+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9f965353-aa55-4650-b20b-e9e0a3e443e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9273", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mser5y3n3s2t", "content": "CVE-2026-9273 restrict-content (CVSS Score 9.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T00:15:10.202269Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9f965353-aa55-4650-b20b-e9e0a3e443e0/export"/>
    <published>2026-08-06T00:15:10.202269+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4bde4c0d-6c8d-4ad8-b71c-7bf42196072f/export</id>
    <title>4bde4c0d-6c8d-4ad8-b71c-7bf42196072f</title>
    <updated>2026-08-06T22:38:04.262402+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4bde4c0d-6c8d-4ad8-b71c-7bf42196072f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mscxkagysn2p", "content": "CVE-2026-9273 - membership plugin \u2013 kadence memberships\nA security issue in the Kadence Memberships plugin for WordPress allows attackers to take control of any account, including administrator accounts, by sending\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#stellarwp #CVE #infosec", "creation_timestamp": "2026-08-05T07:04:04.226794Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4bde4c0d-6c8d-4ad8-b71c-7bf42196072f/export"/>
    <published>2026-08-05T07:04:04.226794+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31a8d0a6-948b-4a0d-8c0f-fd68db899669/export</id>
    <title>31a8d0a6-948b-4a0d-8c0f-fd68db899669</title>
    <updated>2026-08-06T22:38:04.262573+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31a8d0a6-948b-4a0d-8c0f-fd68db899669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9273", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msctyppdsc2t", "content": "Kadence Memberships plugin \u22644.0.0 hit by CRITICAL CVE-2026-9273: attackers can hijack accounts via poisoned password reset links. Restrict reset functionality &amp;amp; watch for patches. https://radar.offseq.com/threat/cve-2026-9273-cwe-640-weak-password-recovery-mechanism-for-forgotten-password-in-stel...", "creation_timestamp": "2026-08-05T06:00:35.632663Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31a8d0a6-948b-4a0d-8c0f-fd68db899669/export"/>
    <published>2026-08-05T06:00:35.632663+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a8c8da28-4dd9-42de-8ddb-d11abd8a58df/export</id>
    <title>a8c8da28-4dd9-42de-8ddb-d11abd8a58df</title>
    <updated>2026-08-06T22:38:04.262691+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a8c8da28-4dd9-42de-8ddb-d11abd8a58df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9273", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117041373701599609", "content": "Kadence Memberships (stellarwp) \u22644.0.0 suffers CRITICAL vuln (CVE-2026-9273, CVSS 9.3): attackers can hijack any account by poisoning password reset links. Restrict reset features &amp;amp; monitor for patches. https://radar.offseq.com/threat/cve-2026-9273-cwe-640-weak-password-recovery-mechanism-for-forgotten-password-in-stellarwp-membership-10c6cffc948a3c97 #OffSeq #WordPress #Vuln #Security", "creation_timestamp": "2026-08-05T06:00:33.963203Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a8c8da28-4dd9-42de-8ddb-d11abd8a58df/export"/>
    <published>2026-08-05T06:00:33.963203+00:00</published>
  </entry>
</feed>
