<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-27T08:15:31.829100+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4d534e61-d2f0-4d6c-8cc0-6304b98e0e4f/export</id>
    <title>4d534e61-d2f0-4d6c-8cc0-6304b98e0e4f</title>
    <updated>2026-06-27T08:15:31.849412+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4d534e61-d2f0-4d6c-8cc0-6304b98e0e4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8380", "type": "seen", "source": "Telegram/vo-VgstXQuzhPYqY8B85GwxskfRMHrGkVpymMR7KirmWNUQ", "content": "", "creation_timestamp": "2026-05-28T15:00:16.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4d534e61-d2f0-4d6c-8cc0-6304b98e0e4f/export"/>
    <published>2026-05-28T15:00:16+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f1697ea6-708c-41c4-b1ee-22d22bfe4618/export</id>
    <title>f1697ea6-708c-41c4-b1ee-22d22bfe4618</title>
    <updated>2026-06-27T08:15:31.849311+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f1697ea6-708c-41c4-b1ee-22d22bfe4618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8380", "type": "seen", "source": "Telegram/gT5VG53EHkYx7lJsNMzVATNBd8Pb7In7gs06zL9W87J77Dc", "content": "", "creation_timestamp": "2026-05-28T21:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f1697ea6-708c-41c4-b1ee-22d22bfe4618/export"/>
    <published>2026-05-28T21:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/732a5604-4d0b-4b29-b1ea-f261dbbf5f66/export</id>
    <title>732a5604-4d0b-4b29-b1ea-f261dbbf5f66</title>
    <updated>2026-06-27T08:15:31.849179+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "732a5604-4d0b-4b29-b1ea-f261dbbf5f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8380", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mp6gelt7h32l", "content": "Frontend File Manager Plugin for WordPress (\u226423.6) has a HIGH severity flaw: author+ users (or guests, if enabled) can delete any post/page. Disable 'Allow guest uploads' now. Patch status unknown. https://radar.offseq.com/threat/cve-2026-8380-cwe-73-external-control-of-file-name-aa5b0eb592b68479...", "creation_timestamp": "2026-06-26T07:30:28.526202Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/732a5604-4d0b-4b29-b1ea-f261dbbf5f66/export"/>
    <published>2026-06-26T07:30:28.526202+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b0a09ff8-b9f3-40b6-ab43-84c6803e41e0/export</id>
    <title>b0a09ff8-b9f3-40b6-ab43-84c6803e41e0</title>
    <updated>2026-06-27T08:15:31.847180+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b0a09ff8-b9f3-40b6-ab43-84c6803e41e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8380", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116815234676437160", "content": "CVE-2026-8380: HIGH severity in Frontend File Manager Plugin (\u226423.6) for WordPress. Author+ users can delete any post/page; guest deletion possible if enabled. Disable 'Allow guest uploads' until patched. https://radar.offseq.com/threat/cve-2026-8380-cwe-73-external-control-of-file-name-aa5b0eb592b68479 #OffSeq #WordPress #Vuln #BlueTeam", "creation_timestamp": "2026-06-26T07:30:34.407296Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b0a09ff8-b9f3-40b6-ab43-84c6803e41e0/export"/>
    <published>2026-06-26T07:30:34.407296+00:00</published>
  </entry>
</feed>
