<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T14:52:08.649121+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9dfc442c-c8bd-42a0-8dfa-d11c115a35a4/export</id>
    <title>9dfc442c-c8bd-42a0-8dfa-d11c115a35a4</title>
    <updated>2026-10-11T14:52:08.685902+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9dfc442c-c8bd-42a0-8dfa-d11c115a35a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93931", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxk6fceqra2h", "content": "\ud83d\udd34 CVE-2026-93931 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injec...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93931/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:01:12.412443Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9dfc442c-c8bd-42a0-8dfa-d11c115a35a4/export"/>
    <published>2026-10-10T19:01:12.412443+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9f276e7d-6b0c-4277-bb2b-6b2095a61686/export</id>
    <title>9f276e7d-6b0c-4277-bb2b-6b2095a61686</title>
    <updated>2026-10-11T14:52:08.688454+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9f276e7d-6b0c-4277-bb2b-6b2095a61686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93931", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjamhyqa22n", "content": "\ud83d\udea8 CVE-2026-93931 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93931\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:08:19.643363Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9f276e7d-6b0c-4277-bb2b-6b2095a61686/export"/>
    <published>2026-10-10T10:08:19.643363+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/303f26f9-596a-4101-9a40-f02a49849e0c/export</id>
    <title>303f26f9-596a-4101-9a40-f02a49849e0c</title>
    <updated>2026-10-11T14:52:08.688676+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "303f26f9-596a-4101-9a40-f02a49849e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93931", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxizz2qxsj2n", "content": "CVE-2026-93931 - smash\nThe Smash theme for WordPress, versions up through 1.12.0, can be tricked into processing crafted data that leads to code execution on the server. This could allow an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#smash #themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:10:05.553833Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/303f26f9-596a-4101-9a40-f02a49849e0c/export"/>
    <published>2026-10-10T08:10:05.553833+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e0dbc1db-7f0c-4186-8936-bcdca500cde9/export</id>
    <title>e0dbc1db-7f0c-4186-8936-bcdca500cde9</title>
    <updated>2026-10-11T14:52:08.688843+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e0dbc1db-7f0c-4186-8936-bcdca500cde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93931", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415408309697738", "content": "CVE-2026-93931 WordPress Smash theme &amp;lt;= 1.12.0 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93931https://patchstack.com/database/wordpress/theme/smash/vulnerability/wordpress-smash-theme-1-12-0-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Smash#CVE_2026_93931#bot", "creation_timestamp": "2026-10-10T07:22:28.673194Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e0dbc1db-7f0c-4186-8936-bcdca500cde9/export"/>
    <published>2026-10-10T07:22:28.673194+00:00</published>
  </entry>
</feed>
