<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 09 Jun 2026 15:48:14 +0000</lastBuildDate>
    <item>
      <title>068741bc-30a6-4ca9-a533-1e3b34aabd47</title>
      <link>https://vulnerability.circl.lu/sighting/068741bc-30a6-4ca9-a533-1e3b34aabd47/export</link>
      <description>{"uuid": "068741bc-30a6-4ca9-a533-1e3b34aabd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7330", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116538135511321220", "content": "\ud83d\udee1\ufe0f CVE-2026-7330: HIGH severity stored XSS in thedark Auto Affiliate Links (\u22646.8.8) lets unauthenticated attackers inject scripts via AJAX endpoint. WP admins at risk \u2014 update/disable plugin! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #Infosec #XSS", "creation_timestamp": "2026-05-08T09:00:29.100807Z"}</description>
      <content:encoded>{"uuid": "068741bc-30a6-4ca9-a533-1e3b34aabd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7330", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116538135511321220", "content": "\ud83d\udee1\ufe0f CVE-2026-7330: HIGH severity stored XSS in thedark Auto Affiliate Links (\u22646.8.8) lets unauthenticated attackers inject scripts via AJAX endpoint. WP admins at risk \u2014 update/disable plugin! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #Infosec #XSS", "creation_timestamp": "2026-05-08T09:00:29.100807Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/068741bc-30a6-4ca9-a533-1e3b34aabd47/export</guid>
      <pubDate>Fri, 08 May 2026 09:00:29 +0000</pubDate>
    </item>
    <item>
      <title>4cb5e13d-497f-45e8-b621-48d389a89517</title>
      <link>https://vulnerability.circl.lu/sighting/4cb5e13d-497f-45e8-b621-48d389a89517/export</link>
      <description>{"uuid": "4cb5e13d-497f-45e8-b621-48d389a89517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7330", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mldekif4rj2y", "content": "HIGH severity XSS in thedark Auto Affiliate Links (\u22646.8.8) allows unauthenticated script injection into WP admin stats. Update or disable plugin immediately! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-08T09:00:30.644159Z"}</description>
      <content:encoded>{"uuid": "4cb5e13d-497f-45e8-b621-48d389a89517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7330", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mldekif4rj2y", "content": "HIGH severity XSS in thedark Auto Affiliate Links (\u22646.8.8) allows unauthenticated script injection into WP admin stats. Update or disable plugin immediately! https://radar.offseq.com/threat/cve-2026-7330-cwe-79-improper-neutralization-of-in-dc918ba5 #OffSeq #WordPress #XSS", "creation_timestamp": "2026-05-08T09:00:30.644159Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4cb5e13d-497f-45e8-b621-48d389a89517/export</guid>
      <pubDate>Fri, 08 May 2026 09:00:30 +0000</pubDate>
    </item>
    <item>
      <title>44b018a6-db4f-47a8-b0bb-416fb45d974f</title>
      <link>https://vulnerability.circl.lu/sighting/44b018a6-db4f-47a8-b0bb-416fb45d974f/export</link>
      <description>{"uuid": "44b018a6-db4f-47a8-b0bb-416fb45d974f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlds63aujy2h", "content": "CVE-2026-7330 - Auto Affiliate Links\nCVE ID : CVE-2026-7330\n \n Published : May 8, 2026, 9:16 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This i...", "creation_timestamp": "2026-05-08T13:04:05.999970Z"}</description>
      <content:encoded>{"uuid": "44b018a6-db4f-47a8-b0bb-416fb45d974f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlds63aujy2h", "content": "CVE-2026-7330 - Auto Affiliate Links\nCVE ID : CVE-2026-7330\n \n Published : May 8, 2026, 9:16 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This i...", "creation_timestamp": "2026-05-08T13:04:05.999970Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44b018a6-db4f-47a8-b0bb-416fb45d974f/export</guid>
      <pubDate>Fri, 08 May 2026 13:04:05 +0000</pubDate>
    </item>
  </channel>
</rss>
