<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-06T18:33:42.327853+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aacc7c57-bac9-42cf-b7e1-39f55f6f2e80/export</id>
    <title>aacc7c57-bac9-42cf-b7e1-39f55f6f2e80</title>
    <updated>2026-06-06T18:33:42.697118+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aacc7c57-bac9-42cf-b7e1-39f55f6f2e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvh6e6h3x2n", "content": "\ud83d\udfe0 CVE-2026-9009 - High (8.8)\n\nThe Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Cod...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9009/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T07:00:32.306128Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aacc7c57-bac9-42cf-b7e1-39f55f6f2e80/export"/>
    <published>2026-05-28T07:00:32.306128+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9b119b69-3603-4565-84b3-b4a2efcf69d3/export</id>
    <title>9b119b69-3603-4565-84b3-b4a2efcf69d3</title>
    <updated>2026-06-06T18:33:42.697011+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9b119b69-3603-4565-84b3-b4a2efcf69d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvicngffi2e", "content": "CVE-2026-9009 - Crawlomatic Multipage Scraper Post Generator\nCVE ID : CVE-2026-9009\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all vers...", "creation_timestamp": "2026-05-28T07:20:48.648788Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9b119b69-3603-4565-84b3-b4a2efcf69d3/export"/>
    <published>2026-05-28T07:20:48.648788+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/22443f3e-9710-4093-873e-0fc7030b2ecf/export</id>
    <title>22443f3e-9710-4093-873e-0fc7030b2ecf</title>
    <updated>2026-06-06T18:33:42.696874+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "22443f3e-9710-4093-873e-0fc7030b2ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9009", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116651027793121168", "content": "\u26a0\ufe0f CVE-2026-9009 (HIGH): Crawlomatic Multipage Scraper Post Generator for WordPress lets author+ users trigger arbitrary PHP code via unsafe shortcodes. No patch yet \u2014 restrict author access &amp;amp; consider disabling plugin. Details: https://radar.offseq.com/threat/cve-2026-9009-cwe-434-unrestricted-upload-of-file--9027f144 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-05-28T07:30:29.502822Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/22443f3e-9710-4093-873e-0fc7030b2ecf/export"/>
    <published>2026-05-28T07:30:29.502822+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e0d2fd4f-eed6-41c0-b5f8-f6accba15021/export</id>
    <title>e0d2fd4f-eed6-41c0-b5f8-f6accba15021</title>
    <updated>2026-06-06T18:33:42.694419+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e0d2fd4f-eed6-41c0-b5f8-f6accba15021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-9009", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmvitxc4jk26", "content": "\ud83d\udea8 HIGH severity: CVE-2026-9009 in Crawlomatic Multipage Scraper Post Generator lets author-level users execute arbitrary PHP code. Restrict access &amp;amp; disable plugin until patched. https://radar.offseq.com/threat/cve-2026-9009-cwe-434-unrestricted-upload-of-file--9027f144 #OffSeq #WordPress #Security", "creation_timestamp": "2026-05-28T07:30:30.299322Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e0d2fd4f-eed6-41c0-b5f8-f6accba15021/export"/>
    <published>2026-05-28T07:30:30.299322+00:00</published>
  </entry>
</feed>
