https://vulnerability.circl.lu/sightings/feed 2026-08-26T16:31:58.334960+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0610dd4f-a87c-45c6-8492-5c840cc3982d/export 2026-08-26T16:31:58.352259+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0610dd4f-a87c-45c6-8492-5c840cc3982d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-26T00:00:10.890169Z"} 2026-08-26T00:00:10.890169+00:00 https://vulnerability.circl.lu/sighting/5e9ab8ec-4269-4ce3-84e0-cd8365ca039b/export 2026-08-26T16:31:58.354024+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5e9ab8ec-4269-4ce3-84e0-cd8365ca039b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/480", "content": "CVE-2026-78267 - TranslatePress <= 3.3.2 Unauthenticated Privilege Escalation", "creation_timestamp": "2026-08-26T00:00:08.660963Z"} 2026-08-26T00:00:08.660963+00:00 https://vulnerability.circl.lu/sighting/7ce8f9b0-8b47-44ed-be2b-aa78c2a30bf3/export 2026-08-26T16:31:58.354122+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7ce8f9b0-8b47-44ed-be2b-aa78c2a30bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/482", "content": "python scanner.py -t https://www.rapidseedbox.com/\n[*] Target: https://www.rapidseedbox.com\n[*] CVE-2026-78267 - TranslatePress <= 3.3.2 Unauthenticated Privilege Escalation\n\n[*] Stage 1: Product/Service Detection...\n[+] Stage 1: TranslatePress/WordPress detected\n\n[*] Stage 2: Version Detection...\n[+] Stage 2: Version 2.6.4 in vulnerable range (<= 3.3.2)\n\n[*] Stage 3: Active Vulnerability Testing...\n[*] Running method: privilege_escalation\n[*] Running method: access_check\n\n[NOT VULNERABLE]\nConfidence: 70%\nEvidence: No active privilege escalation indicators detected", "creation_timestamp": "2026-08-26T00:00:08.630360Z"} 2026-08-26T00:00:08.630360+00:00 https://vulnerability.circl.lu/sighting/890e5945-82be-4f61-9008-28e462cc4695/export 2026-08-26T16:31:58.354211+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "890e5945-82be-4f61-9008-28e462cc4695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/480", "content": "CVE-2026-78267 - TranslatePress <= 3.3.2 Unauthenticated Privilege Escalation", "creation_timestamp": "2026-08-25T21:00:04.098918Z"} 2026-08-25T21:00:04.098918+00:00 https://vulnerability.circl.lu/sighting/052fee44-9ce5-44b2-b937-396bbf65fb42/export 2026-08-26T16:31:58.354287+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "052fee44-9ce5-44b2-b937-396bbf65fb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://t.me/captainsmok3r_official/482", "content": "python scanner.py -t https://www.rapidseedbox.com/\n[*] Target: https://www.rapidseedbox.com\n[*] CVE-2026-78267 - TranslatePress <= 3.3.2 Unauthenticated Privilege Escalation\n\n[*] Stage 1: Product/Service Detection...\n[+] Stage 1: TranslatePress/WordPress detected\n\n[*] Stage 2: Version Detection...\n[+] Stage 2: Version 2.6.4 in vulnerable range (<= 3.3.2)\n\n[*] Stage 3: Active Vulnerability Testing...\n[*] Running method: privilege_escalation\n[*] Running method: access_check\n\n[NOT VULNERABLE]\nConfidence: 70%\nEvidence: No active privilege escalation indicators detected", "creation_timestamp": "2026-08-25T21:00:04.067685Z"} 2026-08-25T21:00:04.067685+00:00 https://vulnerability.circl.lu/sighting/afe3ecba-9ef4-49eb-a434-fdd4eea7efd2/export 2026-08-26T16:31:58.354370+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "afe3ecba-9ef4-49eb-a434-fdd4eea7efd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "published-proof-of-concept", "source": "Telegram/Ks6sPRK7rGEZMA3UBlp7GLmJzLFcjQs_KZ-4Nh0Q9BWMtB8", "content": "", "creation_timestamp": "2026-08-25T09:00:04.597687Z"} 2026-08-25T09:00:04.597687+00:00 https://vulnerability.circl.lu/sighting/e51bbc4a-5da1-4eef-9a1d-e2a0d0cf9522/export 2026-08-26T16:31:58.354441+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e51bbc4a-5da1-4eef-9a1d-e2a0d0cf9522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtujnmwmkk2j", "content": "\ud83d\udea8 CVE-2026-78267 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78267\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T00:08:32.626574Z"} 2026-08-25T00:08:32.626574+00:00 https://vulnerability.circl.lu/sighting/3516042c-96fe-472f-adfc-788d03864da8/export 2026-08-26T16:31:58.354510+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3516042c-96fe-472f-adfc-788d03864da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78267", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117153204482198844", "content": "CVE-2026-78267 (CRITICAL, CVSS 9.8): Cozmoslabs TranslatePress <=3.3.2 is vulnerable to unauthenticated privilege escalation (CWE-266). No patch yet \u2014 monitor vendor advisories for updates. https://radar.offseq.com/threat/cve-2026-78267-cwe-266-incorrect-privilege-assignment-in-cozmoslabs-translatepress-ba0caba45d17d814 #OffSeq #WordPress #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-08-25T00:00:39.946617Z"} 2026-08-25T00:00:39.946617+00:00 https://vulnerability.circl.lu/sighting/aa0670fc-8ca0-49e6-ab48-8d5fe34528b6/export 2026-08-26T16:31:58.354587+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "aa0670fc-8ca0-49e6-ab48-8d5fe34528b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78267", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtuj7htngu2e", "content": "Cozmoslabs TranslatePress <=3.3.2 faces a CRITICAL privilege escalation flaw (CVE-2026-78267, CVSS 9.8). No patch yet \u2014 monitor vendor advisories for updates. https://radar.offseq.com/threat/cve-2026-78267-cwe-266-incorrect-privilege-assignment-in-cozmoslabs-translatepress-ba0caba45d17d814 #OffSe...", "creation_timestamp": "2026-08-25T00:00:38.702044Z"} 2026-08-25T00:00:38.702044+00:00 https://vulnerability.circl.lu/sighting/49058d6f-6d5c-4a62-9f22-14b1eaaec017/export 2026-08-26T16:31:58.354665+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "49058d6f-6d5c-4a62-9f22-14b1eaaec017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78267", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtuhiullc325", "content": "CVE-2026-78267\nThe TranslatePress plugin versions up to 3.3.2 allow a person who is not logged in to gain full administrator privileges on your website. This means an attacker could change settings, install malicious code, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T23:30:05.169277Z"} 2026-08-24T23:30:05.169277+00:00