<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 20:03:06 +0000</lastBuildDate>
    <item>
      <title>184f4d22-4d10-4865-b420-428b4d8bcfd0</title>
      <link>https://vulnerability.circl.lu/sighting/184f4d22-4d10-4865-b420-428b4d8bcfd0/export</link>
      <description>{"uuid": "184f4d22-4d10-4865-b420-428b4d8bcfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuncvoc27", "content": "CVE-2026-41555 - newsletter subscription form \u2013 user subscriptions form, capture email\nThe Capture Email plugin for WordPress (versions up to 1.5.9) allows anyone on the internet to send specially crafted requests that run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T21:40:04.417064Z"}</description>
      <content:encoded>{"uuid": "184f4d22-4d10-4865-b420-428b4d8bcfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcvuncvoc27", "content": "CVE-2026-41555 - newsletter subscription form \u2013 user subscriptions form, capture email\nThe Capture Email plugin for WordPress (versions up to 1.5.9) allows anyone on the internet to send specially crafted requests that run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T21:40:04.417064Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/184f4d22-4d10-4865-b420-428b4d8bcfd0/export</guid>
      <pubDate>Wed, 07 Oct 2026 21:40:04 +0000</pubDate>
    </item>
    <item>
      <title>c5c3aa17-a4d5-4fd3-9e29-3e3f6416940c</title>
      <link>https://vulnerability.circl.lu/sighting/c5c3aa17-a4d5-4fd3-9e29-3e3f6416940c/export</link>
      <description>{"uuid": "c5c3aa17-a4d5-4fd3-9e29-3e3f6416940c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41555", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx7ezeyahs23", "content": "Weblizar Newsletter Subscription Form &amp;lt;=1.5.9 hit by CRITICAL unauthenticated SQL Injection (CVSS 9.3). Patch status unknown \u2014 disable or restrict immediately. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07...", "creation_timestamp": "2026-10-06T12:00:30.652652Z"}</description>
      <content:encoded>{"uuid": "c5c3aa17-a4d5-4fd3-9e29-3e3f6416940c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41555", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mx7ezeyahs23", "content": "Weblizar Newsletter Subscription Form &amp;lt;=1.5.9 hit by CRITICAL unauthenticated SQL Injection (CVSS 9.3). Patch status unknown \u2014 disable or restrict immediately. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07...", "creation_timestamp": "2026-10-06T12:00:30.652652Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c5c3aa17-a4d5-4fd3-9e29-3e3f6416940c/export</guid>
      <pubDate>Tue, 06 Oct 2026 12:00:30 +0000</pubDate>
    </item>
    <item>
      <title>0af92ffd-31ab-4ad3-a05a-f799b23f13f5</title>
      <link>https://vulnerability.circl.lu/sighting/0af92ffd-31ab-4ad3-a05a-f799b23f13f5/export</link>
      <description>{"uuid": "0af92ffd-31ab-4ad3-a05a-f799b23f13f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41555", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393852207082875", "content": "Unauthenticated SQL Injection (CVE-2026-41555, CRITICAL, CVSS 9.3) in Weblizar Newsletter Subscription Form &amp;lt;=1.5.9 impacts WordPress sites. Patch status unknown \u2014 restrict/disable the component. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07f0f81651ae4a40 #OffSeq #WordPress #Infosec #SQLInjection", "creation_timestamp": "2026-10-06T12:00:28.822764Z"}</description>
      <content:encoded>{"uuid": "0af92ffd-31ab-4ad3-a05a-f799b23f13f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-41555", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117393852207082875", "content": "Unauthenticated SQL Injection (CVE-2026-41555, CRITICAL, CVSS 9.3) in Weblizar Newsletter Subscription Form &amp;lt;=1.5.9 impacts WordPress sites. Patch status unknown \u2014 restrict/disable the component. https://radar.offseq.com/threat/cve-2026-41555-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-07f0f81651ae4a40 #OffSeq #WordPress #Infosec #SQLInjection", "creation_timestamp": "2026-10-06T12:00:28.822764Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0af92ffd-31ab-4ad3-a05a-f799b23f13f5/export</guid>
      <pubDate>Tue, 06 Oct 2026 12:00:28 +0000</pubDate>
    </item>
    <item>
      <title>0f34e9b9-7a71-4f3b-b01a-f34e52851258</title>
      <link>https://vulnerability.circl.lu/sighting/0f34e9b9-7a71-4f3b-b01a-f34e52851258/export</link>
      <description>{"uuid": "0f34e9b9-7a71-4f3b-b01a-f34e52851258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41555", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tfqyqh2l", "content": "\ud83d\udea8 CVE-2026-41555 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Newsletter Subscription Form \u2013 User Subscriptions Form, Capture Email &amp;lt;= 1...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-41555\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:47.047529Z"}</description>
      <content:encoded>{"uuid": "0f34e9b9-7a71-4f3b-b01a-f34e52851258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41555", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76tfqyqh2l", "content": "\ud83d\udea8 CVE-2026-41555 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in Newsletter Subscription Form \u2013 User Subscriptions Form, Capture Email &amp;lt;= 1...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-41555\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:09:47.047529Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0f34e9b9-7a71-4f3b-b01a-f34e52851258/export</guid>
      <pubDate>Tue, 06 Oct 2026 10:09:47 +0000</pubDate>
    </item>
  </channel>
</rss>
