https://vulnerability.circl.lu/sightings/feed 2026-08-24T20:42:04.062978+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d1c96692-2933-4235-9ca5-fadec9c98a3a/export 2026-08-24T20:42:04.091363+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d1c96692-2933-4235-9ca5-fadec9c98a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtrenb63tt2o", "content": "\ud83d\udd34 CVE-2026-77002 - Critical (9.8)\n\nThe SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verifi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T18:00:52.751957Z"} 2026-08-23T18:00:52.751957+00:00 https://vulnerability.circl.lu/sighting/d422fe4a-5550-45e4-ba96-455a3c4e089d/export 2026-08-24T20:42:04.094206+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d422fe4a-5550-45e4-ba96-455a3c4e089d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtra4rtgo72p", "content": "CVE-2026-77002 - smilepass selfie login\nThe WordPress SmilePass Selfie Login add\u2011on (up to version 1.0.2) does not check who is actually trying to log in. Because of this, anyone can sign in as any existing user,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-23T16:40:04.322894Z"} 2026-08-23T16:40:04.322894+00:00 https://vulnerability.circl.lu/sighting/d26947b8-1e8d-4b5d-a7f8-4a0df9911706/export 2026-08-24T20:42:04.094308+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d26947b8-1e8d-4b5d-a7f8-4a0df9911706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnqwyfch424", "content": "SmilePass Selfie Login WP plugin (\u22641.0.2) has a CRITICAL flaw: attackers can bypass authentication and access any account. Remove or disable plugin until a fix is released. https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #O...", "creation_timestamp": "2026-08-22T07:30:25.144677Z"} 2026-08-22T07:30:25.144677+00:00 https://vulnerability.circl.lu/sighting/e30a399c-1dfe-4fd1-8e6d-4c1bd72c8984/export 2026-08-24T20:42:04.094398+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e30a399c-1dfe-4fd1-8e6d-4c1bd72c8984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137986193455712", "content": "CRITICAL: CVE-2026-77002 in SmilePass Selfie Login WP plugin (\u22641.0.2) allows full account takeover \u2014 no auth needed. Remove/disable plugin until patched. Details: https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #OffSeq #WordPress #Vuln #CVE202677002", "creation_timestamp": "2026-08-22T07:30:23.261960Z"} 2026-08-22T07:30:23.261960+00:00