<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 26 Aug 2026 02:10:39 +0000</lastBuildDate>
    <item>
      <title>d9f6b434-05bc-4b83-b3cc-2a780d6536d3</title>
      <link>https://vulnerability.circl.lu/sighting/d9f6b434-05bc-4b83-b3cc-2a780d6536d3/export</link>
      <description>{"uuid": "d9f6b434-05bc-4b83-b3cc-2a780d6536d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtvgs7qb432e", "content": "CVE-2026-78477 - jawn\nAll versions of the Jawn theme for WordPress up to 1.4.2 allow anyone on the internet to gain administrator rights on your site. This means an attacker could change settings, add\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jawn #mvpthemes #CVE #infosec", "creation_timestamp": "2026-08-25T08:50:05.141020Z"}</description>
      <content:encoded>{"uuid": "d9f6b434-05bc-4b83-b3cc-2a780d6536d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtvgs7qb432e", "content": "CVE-2026-78477 - jawn\nAll versions of the Jawn theme for WordPress up to 1.4.2 allow anyone on the internet to gain administrator rights on your site. This means an attacker could change settings, add\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jawn #mvpthemes #CVE #infosec", "creation_timestamp": "2026-08-25T08:50:05.141020Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d9f6b434-05bc-4b83-b3cc-2a780d6536d3/export</guid>
      <pubDate>Tue, 25 Aug 2026 08:50:05 +0000</pubDate>
    </item>
    <item>
      <title>152d2b84-053b-4348-bd9b-b50a31354b3b</title>
      <link>https://vulnerability.circl.lu/sighting/152d2b84-053b-4348-bd9b-b50a31354b3b/export</link>
      <description>{"uuid": "152d2b84-053b-4348-bd9b-b50a31354b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvegbtykq23", "content": "\ud83d\udea8 CVE-2026-78477 \u2014 CVSS 9.8 CRITICAL\n\nThe Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78477\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T08:07:37.255382Z"}</description>
      <content:encoded>{"uuid": "152d2b84-053b-4348-bd9b-b50a31354b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvegbtykq23", "content": "\ud83d\udea8 CVE-2026-78477 \u2014 CVSS 9.8 CRITICAL\n\nThe Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78477\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T08:07:37.255382Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/152d2b84-053b-4348-bd9b-b50a31354b3b/export</guid>
      <pubDate>Tue, 25 Aug 2026 08:07:37 +0000</pubDate>
    </item>
    <item>
      <title>8e2169d6-a7ed-45a3-98e7-8099ef2c6841</title>
      <link>https://vulnerability.circl.lu/sighting/8e2169d6-a7ed-45a3-98e7-8099ef2c6841/export</link>
      <description>{"uuid": "8e2169d6-a7ed-45a3-98e7-8099ef2c6841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hix4ievbl5oww", "content": "CVE-2026-78477 - Jawn\nCVE ID : CVE-2026-78477\n \n Published : Aug. 25, 2026, 5:31 a.m. | 20\u00a0minutes ago\n \n Description : The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated at...", "creation_timestamp": "2026-08-25T06:34:31.205337Z"}</description>
      <content:encoded>{"uuid": "8e2169d6-a7ed-45a3-98e7-8099ef2c6841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hix4ievbl5oww", "content": "CVE-2026-78477 - Jawn\nCVE ID : CVE-2026-78477\n \n Published : Aug. 25, 2026, 5:31 a.m. | 20\u00a0minutes ago\n \n Description : The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated at...", "creation_timestamp": "2026-08-25T06:34:31.205337Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8e2169d6-a7ed-45a3-98e7-8099ef2c6841/export</guid>
      <pubDate>Tue, 25 Aug 2026 06:34:31 +0000</pubDate>
    </item>
    <item>
      <title>baa63a68-486a-4488-a365-5d56ae5e7503</title>
      <link>https://vulnerability.circl.lu/sighting/baa63a68-486a-4488-a365-5d56ae5e7503/export</link>
      <description>{"uuid": "baa63a68-486a-4488-a365-5d56ae5e7503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78477", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtv5cuxhfr2w", "content": "MVPThemes Jawn for WordPress has a CRITICAL privilege escalation flaw (CVE-2026-78477) in all versions \u22641.4.2. Unauth attackers can gain admin rights. Audit your sites now. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #Of...", "creation_timestamp": "2026-08-25T06:00:27.578305Z"}</description>
      <content:encoded>{"uuid": "baa63a68-486a-4488-a365-5d56ae5e7503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78477", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtv5cuxhfr2w", "content": "MVPThemes Jawn for WordPress has a CRITICAL privilege escalation flaw (CVE-2026-78477) in all versions \u22641.4.2. Unauth attackers can gain admin rights. Audit your sites now. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #Of...", "creation_timestamp": "2026-08-25T06:00:27.578305Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/baa63a68-486a-4488-a365-5d56ae5e7503/export</guid>
      <pubDate>Tue, 25 Aug 2026 06:00:27 +0000</pubDate>
    </item>
    <item>
      <title>23057d9d-77d5-4afa-bd7e-b125f10984f5</title>
      <link>https://vulnerability.circl.lu/sighting/23057d9d-77d5-4afa-bd7e-b125f10984f5/export</link>
      <description>{"uuid": "23057d9d-77d5-4afa-bd7e-b125f10984f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78477", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117154619350415458", "content": "Privilege escalation vuln (CRITICAL, CVSS 9.8) in MVPThemes Jawn WordPress theme (\u22641.4.2): CVE-2026-78477 lets unauth users elevate to admin. Review deployments &amp;amp; monitor for fixes. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #OffSeq #WordPress #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-08-25T06:00:25.077697Z"}</description>
      <content:encoded>{"uuid": "23057d9d-77d5-4afa-bd7e-b125f10984f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78477", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117154619350415458", "content": "Privilege escalation vuln (CRITICAL, CVSS 9.8) in MVPThemes Jawn WordPress theme (\u22641.4.2): CVE-2026-78477 lets unauth users elevate to admin. Review deployments &amp;amp; monitor for fixes. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #OffSeq #WordPress #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-08-25T06:00:25.077697Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/23057d9d-77d5-4afa-bd7e-b125f10984f5/export</guid>
      <pubDate>Tue, 25 Aug 2026 06:00:25 +0000</pubDate>
    </item>
  </channel>
</rss>
