<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 29 Aug 2026 18:15:50 +0000</lastBuildDate>
    <item>
      <title>6c2ca3e9-b7c4-4bb8-b635-563eba23f88e</title>
      <link>https://vulnerability.circl.lu/sighting/6c2ca3e9-b7c4-4bb8-b635-563eba23f88e/export</link>
      <description>{"uuid": "6c2ca3e9-b7c4-4bb8-b635-563eba23f88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwohr65lm2u", "content": "CVE-2026-78568 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into running extra commands on your website\u2019s database. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T20:40:04.438348Z"}</description>
      <content:encoded>{"uuid": "6c2ca3e9-b7c4-4bb8-b635-563eba23f88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwohr65lm2u", "content": "CVE-2026-78568 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into running extra commands on your website\u2019s database. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T20:40:04.438348Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6c2ca3e9-b7c4-4bb8-b635-563eba23f88e/export</guid>
      <pubDate>Tue, 25 Aug 2026 20:40:04 +0000</pubDate>
    </item>
    <item>
      <title>9ea94bce-e972-4828-98a0-29ad9da18a90</title>
      <link>https://vulnerability.circl.lu/sighting/9ea94bce-e972-4828-98a0-29ad9da18a90/export</link>
      <description>{"uuid": "9ea94bce-e972-4828-98a0-29ad9da18a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvl4z5g372f", "content": "\ud83d\udea8 CVE-2026-78568 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and includin...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78568\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T10:07:42.055156Z"}</description>
      <content:encoded>{"uuid": "9ea94bce-e972-4828-98a0-29ad9da18a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvl4z5g372f", "content": "\ud83d\udea8 CVE-2026-78568 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to SQL Injection in all versions up to, and includin...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78568\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T10:07:42.055156Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9ea94bce-e972-4828-98a0-29ad9da18a90/export</guid>
      <pubDate>Tue, 25 Aug 2026 10:07:42 +0000</pubDate>
    </item>
    <item>
      <title>3365153e-8f9f-4b96-9e4d-de38ad3ee3d6</title>
      <link>https://vulnerability.circl.lu/sighting/3365153e-8f9f-4b96-9e4d-de38ad3ee3d6/export</link>
      <description>{"uuid": "3365153e-8f9f-4b96-9e4d-de38ad3ee3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviybsz4u2a", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78568](https://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wordpress-total-donations-plugin-2-0-5-sql-injection-vulnerability #Vulnerability #CVE ", "creation_timestamp": "2026-08-25T09:29:16.093627Z"}</description>
      <content:encoded>{"uuid": "3365153e-8f9f-4b96-9e4d-de38ad3ee3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78568", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtviybsz4u2a", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-78568](https://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wo...\nhttps://patchstack.com/database/wordpress/plugin/totaldonations/vulnerability/wordpress-total-donations-plugin-2-0-5-sql-injection-vulnerability #Vulnerability #CVE ", "creation_timestamp": "2026-08-25T09:29:16.093627Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3365153e-8f9f-4b96-9e4d-de38ad3ee3d6/export</guid>
      <pubDate>Tue, 25 Aug 2026 09:29:16 +0000</pubDate>
    </item>
    <item>
      <title>43027947-d3c6-45cc-a170-c9dd1c818816</title>
      <link>https://vulnerability.circl.lu/sighting/43027947-d3c6-45cc-a170-c9dd1c818816/export</link>
      <description>{"uuid": "43027947-d3c6-45cc-a170-c9dd1c818816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvherzvbl2f", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations (\u22642.0.5). Unauthenticated DB access possible. Disable plugin until fix is available. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f9771...", "creation_timestamp": "2026-08-25T09:00:29.126842Z"}</description>
      <content:encoded>{"uuid": "43027947-d3c6-45cc-a170-c9dd1c818816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvherzvbl2f", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations (\u22642.0.5). Unauthenticated DB access possible. Disable plugin until fix is available. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f9771...", "creation_timestamp": "2026-08-25T09:00:29.126842Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/43027947-d3c6-45cc-a170-c9dd1c818816/export</guid>
      <pubDate>Tue, 25 Aug 2026 09:00:29 +0000</pubDate>
    </item>
    <item>
      <title>0f436f67-7700-4376-85f1-fc638102faf7</title>
      <link>https://vulnerability.circl.lu/sighting/0f436f67-7700-4376-85f1-fc638102faf7/export</link>
      <description>{"uuid": "0f436f67-7700-4376-85f1-fc638102faf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155327251147740", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations \u22642.0.5. Unauthenticated attackers can extract sensitive DB data via improper input handling. No fix yet \u2014 disable the plugin. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f977190d0ba #OffSeq #WordPress #SQLi #Vuln", "creation_timestamp": "2026-08-25T09:00:26.775095Z"}</description>
      <content:encoded>{"uuid": "0f436f67-7700-4376-85f1-fc638102faf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78568", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155327251147740", "content": "CVE-2026-78568: CRITICAL SQL Injection in KlbTheme Total Donations \u22642.0.5. Unauthenticated attackers can extract sensitive DB data via improper input handling. No fix yet \u2014 disable the plugin. https://radar.offseq.com/threat/cve-2026-78568-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-52b70f977190d0ba #OffSeq #WordPress #SQLi #Vuln", "creation_timestamp": "2026-08-25T09:00:26.775095Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0f436f67-7700-4376-85f1-fc638102faf7/export</guid>
      <pubDate>Tue, 25 Aug 2026 09:00:26 +0000</pubDate>
    </item>
  </channel>
</rss>
