<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-19T06:35:42.171280+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e52b83e7-d0fb-4960-8962-f540cfee6e32/export</id>
    <title>e52b83e7-d0fb-4960-8962-f540cfee6e32</title>
    <updated>2026-09-19T06:35:42.193839+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e52b83e7-d0fb-4960-8962-f540cfee6e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81402", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvduoifhap2o", "content": "\ud83d\udd34 CVE-2026-81402 - Critical (9.8)\n\nThe DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verif...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81402/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T20:01:01.294225Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e52b83e7-d0fb-4960-8962-f540cfee6e32/export"/>
    <published>2026-09-12T20:01:01.294225+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f433e846-9b49-465d-805d-f64e862a3a70/export</id>
    <title>f433e846-9b49-465d-805d-f64e862a3a70</title>
    <updated>2026-09-19T06:35:42.196265+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f433e846-9b49-465d-805d-f64e862a3a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdjhdpavg2t", "content": "CVE-2026-81402 - ds ad rotator\nThe DS Ad Rotator plugin for WordPress does not verify who is uploading or what kind of file is being sent. This means an outsider could place any file, including executable code, on a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-09-12T16:40:10.564846Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f433e846-9b49-465d-805d-f64e862a3a70/export"/>
    <published>2026-09-12T16:40:10.564846+00:00</published>
  </entry>
</feed>
