<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 24 Jul 2026 05:11:43 +0000</lastBuildDate>
    <item>
      <title>ab5dea57-43b7-4f72-9fcd-fcd9e1a08692</title>
      <link>https://vulnerability.circl.lu/sighting/ab5dea57-43b7-4f72-9fcd-fcd9e1a08692/export</link>
      <description>{"uuid": "ab5dea57-43b7-4f72-9fcd-fcd9e1a08692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65471", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcw2d27522s", "content": "CVE-2026-65471 - avada core\nIf you use Avada Core plugin in WordPress, an attacker could trick you into making unintended changes to your website without your knowledge. This could lead to sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avadacore #avadastudio #CVE #infosec", "creation_timestamp": "2026-07-23T13:12:04.821986Z"}</description>
      <content:encoded>{"uuid": "ab5dea57-43b7-4f72-9fcd-fcd9e1a08692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65471", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcw2d27522s", "content": "CVE-2026-65471 - avada core\nIf you use Avada Core plugin in WordPress, an attacker could trick you into making unintended changes to your website without your knowledge. This could lead to sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avadacore #avadastudio #CVE #infosec", "creation_timestamp": "2026-07-23T13:12:04.821986Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ab5dea57-43b7-4f72-9fcd-fcd9e1a08692/export</guid>
      <pubDate>Thu, 23 Jul 2026 13:12:04 +0000</pubDate>
    </item>
    <item>
      <title>d3e39a6f-54b9-4912-92b4-ae700020353c</title>
      <link>https://vulnerability.circl.lu/sighting/d3e39a6f-54b9-4912-92b4-ae700020353c/export</link>
      <description>{"uuid": "d3e39a6f-54b9-4912-92b4-ae700020353c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65471", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrcs2i52k72r", "content": "CVE-2026-65471 is a CRITICAL CSRF vuln in Avada Core (&amp;lt;=5.15.6). Unauthenticated attackers can exploit this \u2014 patch as soon as updates are available. https://radar.offseq.com/threat/cve-2026-65471-cwe-352-cross-site-request-forgery-csrf-in-avada-studio-avada-core-f1e19172d275ec0b #OffSeq #CSRF #A...", "creation_timestamp": "2026-07-23T12:00:35.634959Z"}</description>
      <content:encoded>{"uuid": "d3e39a6f-54b9-4912-92b4-ae700020353c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65471", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrcs2i52k72r", "content": "CVE-2026-65471 is a CRITICAL CSRF vuln in Avada Core (&amp;lt;=5.15.6). Unauthenticated attackers can exploit this \u2014 patch as soon as updates are available. https://radar.offseq.com/threat/cve-2026-65471-cwe-352-cross-site-request-forgery-csrf-in-avada-studio-avada-core-f1e19172d275ec0b #OffSeq #CSRF #A...", "creation_timestamp": "2026-07-23T12:00:35.634959Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d3e39a6f-54b9-4912-92b4-ae700020353c/export</guid>
      <pubDate>Thu, 23 Jul 2026 12:00:35 +0000</pubDate>
    </item>
    <item>
      <title>1a9b47c4-105f-4d09-b9de-207d2d1921f8</title>
      <link>https://vulnerability.circl.lu/sighting/1a9b47c4-105f-4d09-b9de-207d2d1921f8/export</link>
      <description>{"uuid": "1a9b47c4-105f-4d09-b9de-207d2d1921f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65471", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116969179247457924", "content": "CRITICAL: CVE-2026-65471 enables unauthenticated CSRF attacks in Avada Core &amp;lt;=5.15.6. No mitigation yet \u2014 review your deployment status and monitor for fixes. https://radar.offseq.com/threat/cve-2026-65471-cwe-352-cross-site-request-forgery-csrf-in-avada-studio-avada-core-f1e19172d275ec0b #OffSeq #CSRF #AvadaCore #Vuln", "creation_timestamp": "2026-07-23T12:00:33.713894Z"}</description>
      <content:encoded>{"uuid": "1a9b47c4-105f-4d09-b9de-207d2d1921f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65471", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116969179247457924", "content": "CRITICAL: CVE-2026-65471 enables unauthenticated CSRF attacks in Avada Core &amp;lt;=5.15.6. No mitigation yet \u2014 review your deployment status and monitor for fixes. https://radar.offseq.com/threat/cve-2026-65471-cwe-352-cross-site-request-forgery-csrf-in-avada-studio-avada-core-f1e19172d275ec0b #OffSeq #CSRF #AvadaCore #Vuln", "creation_timestamp": "2026-07-23T12:00:33.713894Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1a9b47c4-105f-4d09-b9de-207d2d1921f8/export</guid>
      <pubDate>Thu, 23 Jul 2026 12:00:33 +0000</pubDate>
    </item>
  </channel>
</rss>
