<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-02T12:49:36.585505+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/797a9b6d-e29e-4306-9e99-8c4947a17de2/export</id>
    <title>797a9b6d-e29e-4306-9e99-8c4947a17de2</title>
    <updated>2026-09-02T12:49:36.604446+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "797a9b6d-e29e-4306-9e99-8c4947a17de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15980", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117185059452996667", "content": "CVE-2026-15980 - Critical Auth Bypass in WordPress MyHome Core plugin (&amp;lt;= 4.4.5) allows unauthenticated admin account takeover. CVSS 9.8. Mitigate now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-15980/", "creation_timestamp": "2026-08-30T15:01:55.244698Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/797a9b6d-e29e-4306-9e99-8c4947a17de2/export"/>
    <published>2026-08-30T15:01:55.244698+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3d56b43d-6ccc-4a27-b8e7-42d3426a9fbc/export</id>
    <title>3d56b43d-6ccc-4a27-b8e7-42d3426a9fbc</title>
    <updated>2026-09-02T12:49:36.606802+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3d56b43d-6ccc-4a27-b8e7-42d3426a9fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15980", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mucnvej2s62i", "content": "CVE-2026-15980 - Critical Auth Bypass in WordPress MyHome Core plugin (&amp;lt;= 4.4.5) allows unauthenticated admin account takeover. CVSS 9.8. Mitigate now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-15980/", "creation_timestamp": "2026-08-30T15:01:43.482587Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3d56b43d-6ccc-4a27-b8e7-42d3426a9fbc/export"/>
    <published>2026-08-30T15:01:43.482587+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d1d39893-03ac-4bd5-9880-7c96618a6f41/export</id>
    <title>d1d39893-03ac-4bd5-9880-7c96618a6f41</title>
    <updated>2026-09-02T12:49:36.606941+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d1d39893-03ac-4bd5-9880-7c96618a6f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15980", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mucczmak6x2r", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cMyHome Core\u300d\uff08v4.4.5\u307e\u3067\uff09\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u8a2d\u5b9a\u6b21\u7b2c\u3067\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c\u7ba1\u7406\u8005\u6a29\u9650\u3092\u542b\u3080\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u8a8d\u8a3cCookie\u3092\u53d6\u5f97\u53ef\u80fd\u3002\nCVE-2026-15980 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-30T11:47:14.654141Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d1d39893-03ac-4bd5-9880-7c96618a6f41/export"/>
    <published>2026-08-30T11:47:14.654141+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/62937f99-4d4c-4d5d-8013-28ec9c31fa61/export</id>
    <title>62937f99-4d4c-4d5d-8013-28ec9c31fa61</title>
    <updated>2026-09-02T12:49:36.607047+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "62937f99-4d4c-4d5d-8013-28ec9c31fa61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15980", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2smtog5j33zxv", "content": "CVE-2026-15980 - MyHome Core\nCVE ID : CVE-2026-15980\n \n Published : Aug. 30, 2026, 5:16 a.m. | 52\u00a0minutes ago\n \n Description : The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5. This is due to missing author...", "creation_timestamp": "2026-08-30T06:20:47.213934Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/62937f99-4d4c-4d5d-8013-28ec9c31fa61/export"/>
    <published>2026-08-30T06:20:47.213934+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/edea74a4-b0c3-4f63-b0ae-2f95d9efda31/export</id>
    <title>edea74a4-b0c3-4f63-b0ae-2f95d9efda31</title>
    <updated>2026-09-02T12:49:36.607150+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "edea74a4-b0c3-4f63-b0ae-2f95d9efda31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15980", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mubpzfzf4r2e", "content": "\ud83d\udea8 CVE-2026-15980 \u2014 CVSS 9.8 CRITICAL\n\nThe MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and incl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-15980\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-30T06:07:08.164768Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/edea74a4-b0c3-4f63-b0ae-2f95d9efda31/export"/>
    <published>2026-08-30T06:07:08.164768+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b53aac99-08f7-4290-ad59-f1da7de0ebf7/export</id>
    <title>b53aac99-08f7-4290-ad59-f1da7de0ebf7</title>
    <updated>2026-09-02T12:49:36.607254+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b53aac99-08f7-4290-ad59-f1da7de0ebf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15980", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mubpml4wj226", "content": "\ud83d\udd34 CVE-2026-15980 - Critical (9.8)\n\nThe MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15980/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T05:59:57.777202Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b53aac99-08f7-4290-ad59-f1da7de0ebf7/export"/>
    <published>2026-08-30T05:59:57.777202+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/461d7ca4-9718-4cde-97d6-9023e7d0054e/export</id>
    <title>461d7ca4-9718-4cde-97d6-9023e7d0054e</title>
    <updated>2026-09-02T12:49:36.607355+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "461d7ca4-9718-4cde-97d6-9023e7d0054e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15980", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mublpnoyf22e", "content": "CVE-2026-15980 - myhome core\nThe MyHome Core add\u2011on for WordPress lets anyone create a special link that logs in as any user, even an administrator, if the site uses the older WPBakery setup with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#myhomecore #tangiblewp #CVE #infosec", "creation_timestamp": "2026-08-30T04:50:06.079276Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/461d7ca4-9718-4cde-97d6-9023e7d0054e/export"/>
    <published>2026-08-30T04:50:06.079276+00:00</published>
  </entry>
</feed>
