https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:29:59 +0000 https://vulnerability.circl.lu/sighting/31386407-855e-4d14-a0b2-5656740a2bac/export {"uuid": "31386407-855e-4d14-a0b2-5656740a2bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106166", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117440338671628812", "content": "CVE-2026-106166 NEX-Forms 9.2.1 - 9.2.5 - Unauthenticated Arbitrary Form Entry Modification via 'nf_set_entry_update_id' Parameter The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential identifier.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106166https://wpscan.com/vulnerability/aa33ce05-091d-4fef-b875-4fedb8b8fc9d/#CVE_2026_106166#bot", "creation_timestamp": "2026-10-14T17:02:36.078410Z"} {"uuid": "31386407-855e-4d14-a0b2-5656740a2bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106166", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117440338671628812", "content": "CVE-2026-106166 NEX-Forms 9.2.1 - 9.2.5 - Unauthenticated Arbitrary Form Entry Modification via 'nf_set_entry_update_id' Parameter The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing its sequential identifier.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106166https://wpscan.com/vulnerability/aa33ce05-091d-4fef-b875-4fedb8b8fc9d/#CVE_2026_106166#bot", "creation_timestamp": "2026-10-14T17:02:36.078410Z"} https://vulnerability.circl.lu/sighting/31386407-855e-4d14-a0b2-5656740a2bac/export Wed, 14 Oct 2026 17:02:36 +0000