<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 27 Aug 2026 17:01:45 +0000</lastBuildDate>
    <item>
      <title>44755d13-887a-42f9-86c8-08f58b13b2b5</title>
      <link>https://vulnerability.circl.lu/sighting/44755d13-887a-42f9-86c8-08f58b13b2b5/export</link>
      <description>{"uuid": "44755d13-887a-42f9-86c8-08f58b13b2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwrbaj4ti24", "content": "CVE-2026-78570 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into gaining full admin rights on your site. This means an attacker could change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T21:30:06.195529Z"}</description>
      <content:encoded>{"uuid": "44755d13-887a-42f9-86c8-08f58b13b2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwrbaj4ti24", "content": "CVE-2026-78570 - total donations\nThe Total Donations add\u2011on for WordPress can be tricked by anyone on the internet into gaining full admin rights on your site. This means an attacker could change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#totaldonations #klbtheme #CVE #infosec", "creation_timestamp": "2026-08-25T21:30:06.195529Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44755d13-887a-42f9-86c8-08f58b13b2b5/export</guid>
      <pubDate>Tue, 25 Aug 2026 21:30:06 +0000</pubDate>
    </item>
    <item>
      <title>2872c671-969c-43df-b226-3666bb91d0cd</title>
      <link>https://vulnerability.circl.lu/sighting/2872c671-969c-43df-b226-3666bb91d0cd/export</link>
      <description>{"uuid": "2872c671-969c-43df-b226-3666bb91d0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvrt57gtb2j", "content": "\ud83d\udea8 CVE-2026-78570 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78570\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T12:07:27.164270Z"}</description>
      <content:encoded>{"uuid": "2872c671-969c-43df-b226-3666bb91d0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78570", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvrt57gtb2j", "content": "\ud83d\udea8 CVE-2026-78570 \u2014 CVSS 9.8 CRITICAL\n\nThe Total Donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78570\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T12:07:27.164270Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2872c671-969c-43df-b226-3666bb91d0cd/export</guid>
      <pubDate>Tue, 25 Aug 2026 12:07:27 +0000</pubDate>
    </item>
    <item>
      <title>5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c</title>
      <link>https://vulnerability.circl.lu/sighting/5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c/export</link>
      <description>{"uuid": "5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvmfnixbs2y", "content": "CRITICAL: KlbTheme Total Donations &amp;lt;=2.0.5 allows unauthenticated privilege escalation (CVE-2026-78570). No patch available \u2014 remove or disable plugin to reduce risk. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 ...", "creation_timestamp": "2026-08-25T10:30:26.797323Z"}</description>
      <content:encoded>{"uuid": "5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtvmfnixbs2y", "content": "CRITICAL: KlbTheme Total Donations &amp;lt;=2.0.5 allows unauthenticated privilege escalation (CVE-2026-78570). No patch available \u2014 remove or disable plugin to reduce risk. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 ...", "creation_timestamp": "2026-08-25T10:30:26.797323Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5dc1f4ac-6a5c-45f7-b198-efcee1c6d68c/export</guid>
      <pubDate>Tue, 25 Aug 2026 10:30:26 +0000</pubDate>
    </item>
    <item>
      <title>09815151-aaf8-4a16-8617-c0aa79f08662</title>
      <link>https://vulnerability.circl.lu/sighting/09815151-aaf8-4a16-8617-c0aa79f08662/export</link>
      <description>{"uuid": "09815151-aaf8-4a16-8617-c0aa79f08662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155680980822160", "content": "KlbTheme Total Donations &amp;lt;=2.0.5 has a CRITICAL privilege escalation vuln (CVE-2026-78570, CVSS 9.8). Unauthenticated attackers can gain admin access. No patch yet \u2014 disable/remove plugin &amp;amp; monitor for advisories. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 #OffSeq #WordPress #CVE #Vuln", "creation_timestamp": "2026-08-25T10:30:24.560245Z"}</description>
      <content:encoded>{"uuid": "09815151-aaf8-4a16-8617-c0aa79f08662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78570", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117155680980822160", "content": "KlbTheme Total Donations &amp;lt;=2.0.5 has a CRITICAL privilege escalation vuln (CVE-2026-78570, CVSS 9.8). Unauthenticated attackers can gain admin access. No patch yet \u2014 disable/remove plugin &amp;amp; monitor for advisories. https://radar.offseq.com/threat/cve-2026-78570-cwe-269-improper-privilege-management-in-klbtheme-total-donations-fcfd73df270b6d37 #OffSeq #WordPress #CVE #Vuln", "creation_timestamp": "2026-08-25T10:30:24.560245Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/09815151-aaf8-4a16-8617-c0aa79f08662/export</guid>
      <pubDate>Tue, 25 Aug 2026 10:30:24 +0000</pubDate>
    </item>
  </channel>
</rss>
