https://vulnerability.circl.lu/sightings/feed 2026-08-27T23:40:49.452212+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b2b3035e-3bd3-46b0-8a92-2348ac90f48a/export 2026-08-27T23:40:49.478470+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b2b3035e-3bd3-46b0-8a92-2348ac90f48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "published-proof-of-concept", "source": "Telegram/6MOWzdsuBRUfSRyh2aRpTFk-sLxYOyyrOXiUm5uMNWePPGY", "content": "", "creation_timestamp": "2026-08-25T00:00:07.748199Z"} 2026-08-25T00:00:07.748199+00:00 https://vulnerability.circl.lu/sighting/4bdb7f47-2fa2-49be-8140-afb6067da661/export 2026-08-27T23:40:49.480423+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4bdb7f47-2fa2-49be-8140-afb6067da661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "Telegram/6MOWzdsuBRUfSRyh2aRpTFk-sLxYOyyrOXiUm5uMNWePPGY", "content": "", "creation_timestamp": "2026-08-24T21:00:06.094960Z"} 2026-08-24T21:00:06.094960+00:00 https://vulnerability.circl.lu/sighting/c5861695-1734-40b2-9f41-6f434d2687bc/export 2026-08-27T23:40:49.480606+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c5861695-1734-40b2-9f41-6f434d2687bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117145218203081604", "content": "CVE-2026-4703 - Critical PHP Object Injection in WS Form for WordPress leads to remote code execution via insecure deserialization. CVSS 9.8. Update now. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-4703/", "creation_timestamp": "2026-08-23T14:09:41.324655Z"} 2026-08-23T14:09:41.324655+00:00 https://vulnerability.circl.lu/sighting/4dd3f8ed-0dbd-4e59-b15f-7d6577fd48c6/export 2026-08-27T23:40:49.480759+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4dd3f8ed-0dbd-4e59-b15f-7d6577fd48c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtqxpoala72o", "content": "CVE-2026-4703 - Critical PHP Object Injection in WS Form for WordPress leads to remote code execution via insecure deserialization. CVSS 9.8. Update now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-4703/", "creation_timestamp": "2026-08-23T14:09:34.539285Z"} 2026-08-23T14:09:34.539285+00:00 https://vulnerability.circl.lu/sighting/f1876a9e-b2dd-4308-ad5f-6862808e5143/export 2026-08-27T23:40:49.480898+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f1876a9e-b2dd-4308-ad5f-6862808e5143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtpncccg4i27", "content": "PHP Object Injection in WS Form LITE \u22641.10.80 (CVE-2026-4703, CRITICAL). RCE possible if a POP chain is present in another plugin/theme. Audit your WordPress setup, remove risky components, and monitor for patches. https://radar.offseq.com/threat/the-ws-form-lite-drag-drop-contact-form-builder-pl...", "creation_timestamp": "2026-08-23T01:30:29.505710Z"} 2026-08-23T01:30:29.505710+00:00 https://vulnerability.circl.lu/sighting/b8d3df87-658f-4685-b61e-9a6d509b84de/export 2026-08-27T23:40:49.481038+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b8d3df87-658f-4685-b61e-9a6d509b84de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117142233153816927", "content": "CVE-2026-4703: WS Form LITE \u22641.10.80 has a CRITICAL PHP Object Injection vuln via form meta deserialization. Exploitable if a POP chain exists in another plugin/theme \u2014 possible RCE, file deletion, or data leak. Audit plugins/themes. https://radar.offseq.com/threat/the-ws-form-lite-drag-drop-contact-form-builder-plugin-for-wordpress-is-vulnerable-to-php-object-f688cffee1daa479 #OffSeq #WordPress #CVE20264703", "creation_timestamp": "2026-08-23T01:30:26.742874Z"} 2026-08-23T01:30:26.742874+00:00 https://vulnerability.circl.lu/sighting/5f792bbf-1e11-413a-b5a5-f2094d75f99e/export 2026-08-27T23:40:49.481184+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5f792bbf-1e11-413a-b5a5-f2094d75f99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtp676cwhk2o", "content": "\ud83d\udd34 CVE-2026-4703 - Critical (9.8)\n\nThe WS Form LITE \u2013 Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP O...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4703/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T21:00:19.376138Z"} 2026-08-22T21:00:19.376138+00:00 https://vulnerability.circl.lu/sighting/338cc3ab-4278-45d3-9098-cd0cb296a0b7/export 2026-08-27T23:40:49.481318+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "338cc3ab-4278-45d3-9098-cd0cb296a0b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtowfgmkhz2z", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cWS Form LITE\u300d\u306bPHP\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u30d5\u30a9\u30fc\u30e0\u9001\u4fe1\u30e1\u30bf\u5024\u304b\u3089\u306e\u4fe1\u983c\u3067\u304d\u306a\u3044\u5165\u529b\u306e\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30bc\u30fc\u30b7\u30e7\u30f3\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u2026\nCVE-2026-4703 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-22T18:40:37.825081Z"} 2026-08-22T18:40:37.825081+00:00 https://vulnerability.circl.lu/sighting/6fb8fde6-8820-41f7-9755-5f28da7780d6/export 2026-08-27T23:40:49.481447+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6fb8fde6-8820-41f7-9755-5f28da7780d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtoukho2fl25", "content": "\ud83d\udea8 CVE-2026-4703 \u2014 CVSS 9.8 CRITICAL\n\nThe WS Form LITE \u2013 Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Inject...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-4703\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T18:07:39.014777Z"} 2026-08-22T18:07:39.014777+00:00 https://vulnerability.circl.lu/sighting/daac0eea-b61c-485a-8ba6-5b8d8e9b6043/export 2026-08-27T23:40:49.481578+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "daac0eea-b61c-485a-8ba6-5b8d8e9b6043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtook3kbb42j", "content": "CVE-2026-4703 - ws form lite \u2013 drag & drop contact form builder\nThe WS Form LITE contact\u2011form plugin for WordPress can accept specially crafted data when a form is submitted, allowing anyone on the internet to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#westguard #CVE #infosec", "creation_timestamp": "2026-08-22T16:20:04.114956Z"} 2026-08-22T16:20:04.114956+00:00