<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 17 Oct 2026 06:11:15 +0000</lastBuildDate>
    <item>
      <title>14a90310-50bd-46dc-9dd1-6e55614200d8</title>
      <link>https://vulnerability.circl.lu/sighting/14a90310-50bd-46dc-9dd1-6e55614200d8/export</link>
      <description>{"uuid": "14a90310-50bd-46dc-9dd1-6e55614200d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-110012", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117449160781716047", "content": "CVE-2026-110012 Salon Booking System &amp;lt; 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming The Salon Booking System  WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110012https://wpscan.com/vulnerability/7253eae4-4759-4388-8120-500b9d7352c4/#CVE_2026_110012#bot", "creation_timestamp": "2026-10-16T06:26:13.689352Z"}</description>
      <content:encoded>{"uuid": "14a90310-50bd-46dc-9dd1-6e55614200d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-110012", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117449160781716047", "content": "CVE-2026-110012 Salon Booking System &amp;lt; 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming The Salon Booking System  WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110012https://wpscan.com/vulnerability/7253eae4-4759-4388-8120-500b9d7352c4/#CVE_2026_110012#bot", "creation_timestamp": "2026-10-16T06:26:13.689352Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/14a90310-50bd-46dc-9dd1-6e55614200d8/export</guid>
      <pubDate>Fri, 16 Oct 2026 06:26:13 +0000</pubDate>
    </item>
  </channel>
</rss>
