https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 04 May 2026 11:13:07 +0000 https://vulnerability.circl.lu/sighting/ade50f4b-cf20-4857-8c81-f4ce15c4244a/export {"uuid": "ade50f4b-cf20-4857-8c81-f4ce15c4244a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4700", "type": "seen", "source": "https://t.me/cibsecurity/56250", "content": "\u203c CVE-2022-4700 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:49.000000Z"} {"uuid": "ade50f4b-cf20-4857-8c81-f4ce15c4244a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4700", "type": "seen", "source": "https://t.me/cibsecurity/56250", "content": "\u203c CVE-2022-4700 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:49.000000Z"} https://vulnerability.circl.lu/sighting/ade50f4b-cf20-4857-8c81-f4ce15c4244a/export Tue, 10 Jan 2023 20:28:49 +0000 https://vulnerability.circl.lu/sighting/5016846d-7cbd-41d8-a0b5-005af7cc0a1b/export {"uuid": "5016846d-7cbd-41d8-a0b5-005af7cc0a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "seen", "source": "https://t.me/cibsecurity/57284", "content": "\u203c CVE-2022-47002 \u203c\n\nA vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:06.000000Z"} {"uuid": "5016846d-7cbd-41d8-a0b5-005af7cc0a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "seen", "source": "https://t.me/cibsecurity/57284", "content": "\u203c CVE-2022-47002 \u203c\n\nA vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:06.000000Z"} https://vulnerability.circl.lu/sighting/5016846d-7cbd-41d8-a0b5-005af7cc0a1b/export Wed, 01 Feb 2023 16:14:06 +0000 https://vulnerability.circl.lu/sighting/02e293f7-79d5-4093-8a96-852184886dc5/export {"uuid": "02e293f7-79d5-4093-8a96-852184886dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "seen", "source": "https://t.me/cibsecurity/57305", "content": "\u203c CVE-2022-47003 \u203c\n\nA vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:29:35.000000Z"} {"uuid": "02e293f7-79d5-4093-8a96-852184886dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "seen", "source": "https://t.me/cibsecurity/57305", "content": "\u203c CVE-2022-47003 \u203c\n\nA vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:29:35.000000Z"} https://vulnerability.circl.lu/sighting/02e293f7-79d5-4093-8a96-852184886dc5/export Wed, 01 Feb 2023 16:29:35 +0000 https://vulnerability.circl.lu/sighting/07aba7b6-2423-4d82-bd22-339ba06d96d3/export {"uuid": "07aba7b6-2423-4d82-bd22-339ba06d96d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "published-proof-of-concept", "source": "Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE", "content": "", "creation_timestamp": "2023-03-13T13:17:14.000000Z"} {"uuid": "07aba7b6-2423-4d82-bd22-339ba06d96d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "published-proof-of-concept", "source": "Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE", "content": "", "creation_timestamp": "2023-03-13T13:17:14.000000Z"} https://vulnerability.circl.lu/sighting/07aba7b6-2423-4d82-bd22-339ba06d96d3/export Mon, 13 Mar 2023 13:17:14 +0000 https://vulnerability.circl.lu/sighting/27fdc679-1d97-49e9-8a03-c57ded029b5e/export {"uuid": "27fdc679-1d97-49e9-8a03-c57ded029b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "published-proof-of-concept", "source": "Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE", "content": "", "creation_timestamp": "2023-03-13T13:17:14.000000Z"} {"uuid": "27fdc679-1d97-49e9-8a03-c57ded029b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "published-proof-of-concept", "source": "Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE", "content": "", "creation_timestamp": "2023-03-13T13:17:14.000000Z"} https://vulnerability.circl.lu/sighting/27fdc679-1d97-49e9-8a03-c57ded029b5e/export Mon, 13 Mar 2023 13:17:14 +0000 https://vulnerability.circl.lu/sighting/0b6cbd56-93c9-44ad-811d-0b5ff1cf1c09/export {"uuid": "0b6cbd56-93c9-44ad-811d-0b5ff1cf1c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4700", "type": "seen", "source": "https://t.me/arpsyndicate/1691", "content": "#ExploitObserverAlert\n\nCVE-2022-4700\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2022-4700. The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-11T02:48:51.000000Z"} {"uuid": "0b6cbd56-93c9-44ad-811d-0b5ff1cf1c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4700", "type": "seen", "source": "https://t.me/arpsyndicate/1691", "content": "#ExploitObserverAlert\n\nCVE-2022-4700\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2022-4700. The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-11T02:48:51.000000Z"} https://vulnerability.circl.lu/sighting/0b6cbd56-93c9-44ad-811d-0b5ff1cf1c09/export Mon, 11 Dec 2023 02:48:51 +0000 https://vulnerability.circl.lu/sighting/e8b5142e-8875-4333-9401-0fe5512edb91/export {"uuid": "e8b5142e-8875-4333-9401-0fe5512edb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "seen", "source": "https://t.me/ctinow/157636", "content": "https://ift.tt/hIPO237\nCVE-2022-47002 Exploit", "creation_timestamp": "2023-12-21T12:18:50.000000Z"} {"uuid": "e8b5142e-8875-4333-9401-0fe5512edb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "seen", "source": "https://t.me/ctinow/157636", "content": "https://ift.tt/hIPO237\nCVE-2022-47002 Exploit", "creation_timestamp": "2023-12-21T12:18:50.000000Z"} https://vulnerability.circl.lu/sighting/e8b5142e-8875-4333-9401-0fe5512edb91/export Thu, 21 Dec 2023 12:18:50 +0000 https://vulnerability.circl.lu/sighting/bc17287a-f46f-45b2-b287-c59ebd421815/export {"uuid": "bc17287a-f46f-45b2-b287-c59ebd421815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7915", "content": "#exploit\n1. CVE-2023-20937:\nAndroid GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code\nhttps://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html\n2. CVE-2022-47003, CVE-2022-47002:\nAuthentication Bypass in Mura/Masa CMS\nhttps://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html", "creation_timestamp": "2024-09-27T18:36:12.000000Z"} {"uuid": "bc17287a-f46f-45b2-b287-c59ebd421815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7915", "content": "#exploit\n1. CVE-2023-20937:\nAndroid GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code\nhttps://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html\n2. CVE-2022-47003, CVE-2022-47002:\nAuthentication Bypass in Mura/Masa CMS\nhttps://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html", "creation_timestamp": "2024-09-27T18:36:12.000000Z"} https://vulnerability.circl.lu/sighting/bc17287a-f46f-45b2-b287-c59ebd421815/export Fri, 27 Sep 2024 18:36:12 +0000 https://vulnerability.circl.lu/sighting/dc2f2b2b-0df7-4f6f-91bf-dd57fb6fa0b3/export {"uuid": "dc2f2b2b-0df7-4f6f-91bf-dd57fb6fa0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7915", "content": "#exploit\n1. CVE-2023-20937:\nAndroid GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code\nhttps://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html\n2. CVE-2022-47003, CVE-2022-47002:\nAuthentication Bypass in Mura/Masa CMS\nhttps://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html", "creation_timestamp": "2024-09-27T18:36:12.000000Z"} {"uuid": "dc2f2b2b-0df7-4f6f-91bf-dd57fb6fa0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7915", "content": "#exploit\n1. CVE-2023-20937:\nAndroid GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code\nhttps://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html\n2. CVE-2022-47003, CVE-2022-47002:\nAuthentication Bypass in Mura/Masa CMS\nhttps://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html", "creation_timestamp": "2024-09-27T18:36:12.000000Z"} https://vulnerability.circl.lu/sighting/dc2f2b2b-0df7-4f6f-91bf-dd57fb6fa0b3/export Fri, 27 Sep 2024 18:36:12 +0000