https://vulnerability.circl.lu/sightings/feed 2026-08-29T19:15:40.577190+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6c2ca3e9-b7c4-4bb8-b635-563eba23f88e/export 2026-08-29T19:15:40.604089+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6c2ca3e9-b7c4-4bb8-b635-563eba23f88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwohr65lm2u", "content": "CVE-2026-78568 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into running extra commands on your website\u2019s database. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T20:40:04.438348Z"} 2026-08-25T20:40:04.438348+00:00 https://vulnerability.circl.lu/sighting/9ea94bce-e972-4828-98a0-29ad9da18a90/export 2026-08-29T19:15:40.607288+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9ea94bce-e972-4828-98a0-29ad9da18a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvl4z5g372f", "content": "\ud83d\udea8 CVE-2026-78568 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and includin...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78568\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T10:07:42.055156Z"} 2026-08-25T10:07:42.055156+00:00 https://vulnerability.circl.lu/sighting/3365153e-8f9f-4b96-9e4d-de38ad3ee3d6/export 2026-08-29T19:15:40.607623+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3365153e-8f9f-4b96-9e4d-de38ad3ee3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviybsz4u2a", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78568](https://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wordpress-total-donations-plugin-2-0-5-sql-injection-vulnerability #Vulnerability #CVE ", "creation_timestamp": "2026-08-25T09:29:16.093627Z"} 2026-08-25T09:29:16.093627+00:00 https://vulnerability.circl.lu/sighting/43027947-d3c6-45cc-a170-c9dd1c818816/export 2026-08-29T19:15:40.607865+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "43027947-d3c6-45cc-a170-c9dd1c818816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvherzvbl2f", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations (\u22642.0.5). Unauthenticated DB access possible. Disable plugin until fix is available. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f9771...", "creation_timestamp": "2026-08-25T09:00:29.126842Z"} 2026-08-25T09:00:29.126842+00:00 https://vulnerability.circl.lu/sighting/0f436f67-7700-4376-85f1-fc638102faf7/export 2026-08-29T19:15:40.608098+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0f436f67-7700-4376-85f1-fc638102faf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155327251147740", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations \u22642.0.5. Unauthenticated attackers can extract sensitive DB data via improper input handling. No fix yet \u2014 disable the plugin. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f977190d0ba #OffSeq #WordPress #SQLi #Vuln", "creation_timestamp": "2026-08-25T09:00:26.775095Z"} 2026-08-25T09:00:26.775095+00:00