https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 28 May 2026 12:09:42 +0000 https://vulnerability.circl.lu/sighting/1a47028d-c2e0-427a-b729-f7b7053eecbd/export {"uuid": "1a47028d-c2e0-427a-b729-f7b7053eecbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6495", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116594404656368136", "content": "\u26a0\ufe0f HIGH severity: Reflected XSS in Ajax Load More < 7.8.4 (CVE-2026-6495) lets attackers inject scripts as admin. No patch confirmed \u2014 restrict access, monitor for updates, and consider WAF rules. Details: https://radar.offseq.com/threat/cve-2026-6495-cwe-79-cross-site-scripting-xss-in-a-662ee7d0 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-18T07:30:27.406438Z"} {"uuid": "1a47028d-c2e0-427a-b729-f7b7053eecbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6495", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116594404656368136", "content": "\u26a0\ufe0f HIGH severity: Reflected XSS in Ajax Load More < 7.8.4 (CVE-2026-6495) lets attackers inject scripts as admin. No patch confirmed \u2014 restrict access, monitor for updates, and consider WAF rules. Details: https://radar.offseq.com/threat/cve-2026-6495-cwe-79-cross-site-scripting-xss-in-a-662ee7d0 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-18T07:30:27.406438Z"} https://vulnerability.circl.lu/sighting/1a47028d-c2e0-427a-b729-f7b7053eecbd/export Mon, 18 May 2026 07:30:27 +0000 https://vulnerability.circl.lu/sighting/686d5891-5fdf-468a-9042-a16795aab3e4/export {"uuid": "686d5891-5fdf-468a-9042-a16795aab3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6495", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mm4e6qc5hu2m", "content": "Ajax Load More plugin < 7.8.4 hit by HIGH severity XSS (CVE-2026-6495) \u2014 attackers could run code as admin. No patch confirmed. Restrict access & monitor updates. Details: https://radar.offseq.com/threat/cve-2026-6495-cwe-79-cross-site-scripting-xss-in-a-662ee7d0 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-18T07:30:29.504319Z"} {"uuid": "686d5891-5fdf-468a-9042-a16795aab3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6495", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mm4e6qc5hu2m", "content": "Ajax Load More plugin < 7.8.4 hit by HIGH severity XSS (CVE-2026-6495) \u2014 attackers could run code as admin. No patch confirmed. Restrict access & monitor updates. Details: https://radar.offseq.com/threat/cve-2026-6495-cwe-79-cross-site-scripting-xss-in-a-662ee7d0 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-18T07:30:29.504319Z"} https://vulnerability.circl.lu/sighting/686d5891-5fdf-468a-9042-a16795aab3e4/export Mon, 18 May 2026 07:30:29 +0000 https://vulnerability.circl.lu/sighting/bee73a09-164d-4f33-b27c-09f31d06f06f/export {"uuid": "bee73a09-164d-4f33-b27c-09f31d06f06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6495", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm4jy4cgk72v", "content": "CVE-2026-6495 - Ajax Load More\nCVE ID : CVE-2026-6495\n \n Published : May 18, 2026, 7:16 a.m. | 55\u00a0minutes ago\n \n Description : The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflecte...", "creation_timestamp": "2026-05-18T09:14:09.126989Z"} {"uuid": "bee73a09-164d-4f33-b27c-09f31d06f06f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6495", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm4jy4cgk72v", "content": "CVE-2026-6495 - Ajax Load More\nCVE ID : CVE-2026-6495\n \n Published : May 18, 2026, 7:16 a.m. | 55\u00a0minutes ago\n \n Description : The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflecte...", "creation_timestamp": "2026-05-18T09:14:09.126989Z"} https://vulnerability.circl.lu/sighting/bee73a09-164d-4f33-b27c-09f31d06f06f/export Mon, 18 May 2026 09:14:09 +0000