<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T21:40:15.230874+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce2ece44-3f5d-44b6-a2b3-a5bc25c85630/export</id>
    <title>ce2ece44-3f5d-44b6-a2b3-a5bc25c85630</title>
    <updated>2026-10-11T21:40:15.246750+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce2ece44-3f5d-44b6-a2b3-a5bc25c85630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62045", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxkbql7fc32b", "content": "\ud83d\udd34 CVE-2026-62045 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Ob...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62045/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T20:01:10.889077Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce2ece44-3f5d-44b6-a2b3-a5bc25c85630/export"/>
    <published>2026-10-10T20:01:10.889077+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b66da789-b9cd-4fef-b778-9191f0eb6340/export</id>
    <title>b66da789-b9cd-4fef-b778-9191f0eb6340</title>
    <updated>2026-10-11T21:40:15.248730+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b66da789-b9cd-4fef-b778-9191f0eb6340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62045", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjal7qdqx2z", "content": "\ud83d\udea8 CVE-2026-62045 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62045\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:07:37.258498Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b66da789-b9cd-4fef-b778-9191f0eb6340/export"/>
    <published>2026-10-10T10:07:37.258498+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/391ff42c-9c96-4f42-ac74-a3521ad2e59f/export</id>
    <title>391ff42c-9c96-4f42-ac74-a3521ad2e59f</title>
    <updated>2026-10-11T21:40:15.248822+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "391ff42c-9c96-4f42-ac74-a3521ad2e59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62045", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj4alwmii2z", "content": "CVE-2026-62045 - booklovers\nThe Booklovers theme for WordPress (versions up to 2.13.0) does not properly check data it receives, allowing a specially crafted request to inject malicious code. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#booklovers #themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:50:06.167887Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/391ff42c-9c96-4f42-ac74-a3521ad2e59f/export"/>
    <published>2026-10-10T08:50:06.167887+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f751a25f-7746-4e6a-9e46-eef3ec241911/export</id>
    <title>f751a25f-7746-4e6a-9e46-eef3ec241911</title>
    <updated>2026-10-11T21:40:15.248890+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f751a25f-7746-4e6a-9e46-eef3ec241911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bw4xk2wjzyzu5", "content": "CVE-2026-62045 - WordPress Booklovers theme\nCVE ID : CVE-2026-62045\n \n Published : Oct. 10, 2026, 7 a.m. | 29\u00a0minutes ago\n \n Description : Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklov...", "creation_timestamp": "2026-10-10T08:15:20.723339Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f751a25f-7746-4e6a-9e46-eef3ec241911/export"/>
    <published>2026-10-10T08:15:20.723339+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/813de680-fae2-4b22-bbf6-e51ca12fd647/export</id>
    <title>813de680-fae2-4b22-bbf6-e51ca12fd647</title>
    <updated>2026-10-11T21:40:15.248950+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "813de680-fae2-4b22-bbf6-e51ca12fd647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62045", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxixs5iltb2m", "content": "ThemeREX Booklovers plugin (&amp;lt;=2.13.0) hit by CRITICAL object injection flaw (CVE-2026-62045, CVSS 9.8). Review your installs &amp;amp; restrict exposure until patched. https://radar.offseq.com/threat/cve-2026-62045-deserialization-of-untrusted-data-in-themerex-group-booklovers-71a61b206a138f37 #OffSeq #C...", "creation_timestamp": "2026-10-10T07:30:26.963716Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/813de680-fae2-4b22-bbf6-e51ca12fd647/export"/>
    <published>2026-10-10T07:30:26.963716+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/17d06915-b5d4-4efd-9569-cbb25d06d19c/export</id>
    <title>17d06915-b5d4-4efd-9569-cbb25d06d19c</title>
    <updated>2026-10-11T21:40:15.249013+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "17d06915-b5d4-4efd-9569-cbb25d06d19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62045", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117415439479697666", "content": "Deserialization of untrusted data in ThemeREX Booklovers (&amp;lt;=2.13.0) \u2014 CVE-2026-62045 (CRITICAL, CVSS 9.8) enables object injection. No patch yet, so restrict access &amp;amp; monitor. Details: https://radar.offseq.com/threat/cve-2026-62045-deserialization-of-untrusted-data-in-themerex-group-booklovers-71a61b206a138f37 #OffSeq #CVE202662045 #WordPress #Vuln #infosec", "creation_timestamp": "2026-10-10T07:30:24.389803Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/17d06915-b5d4-4efd-9569-cbb25d06d19c/export"/>
    <published>2026-10-10T07:30:24.389803+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/32159f6b-84e5-4719-86b6-aaba706bbda4/export</id>
    <title>32159f6b-84e5-4719-86b6-aaba706bbda4</title>
    <updated>2026-10-11T21:40:15.249073+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "32159f6b-84e5-4719-86b6-aaba706bbda4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62045", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415395075420481", "content": "CVE-2026-62045 WordPress Booklovers theme &amp;lt;= 2.13.0 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-62045https://patchstack.com/database/wordpress/theme/booklovers/vulnerability/wordpress-booklovers-theme-2-13-0-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Booklovers#CVE_2026_62045#bot", "creation_timestamp": "2026-10-10T07:19:06.816978Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/32159f6b-84e5-4719-86b6-aaba706bbda4/export"/>
    <published>2026-10-10T07:19:06.816978+00:00</published>
  </entry>
</feed>
