https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 20:20:59 +0000 https://vulnerability.circl.lu/sighting/e1b38ab8-19b5-4ac7-9885-0ca9518decf0/export {"uuid": "e1b38ab8-19b5-4ac7-9885-0ca9518decf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlyyw4wns2x", "content": "CVE-2026-84254 - click5 crm add-on to contact form 7\nThe click5 CRM add\u2011on for the Contact Form\u202f7 WordPress plugin allows anyone on the internet to modify the site's configuration without logging in. This could be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-10-11T12:30:06.235386Z"} {"uuid": "e1b38ab8-19b5-4ac7-9885-0ca9518decf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlyyw4wns2x", "content": "CVE-2026-84254 - click5 crm add-on to contact form 7\nThe click5 CRM add\u2011on for the Contact Form\u202f7 WordPress plugin allows anyone on the internet to modify the site's configuration without logging in. This could be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-10-11T12:30:06.235386Z"} https://vulnerability.circl.lu/sighting/e1b38ab8-19b5-4ac7-9885-0ca9518decf0/export Sun, 11 Oct 2026 12:30:06 +0000 https://vulnerability.circl.lu/sighting/5174c56c-adbf-4f10-bb85-c49297b35911/export {"uuid": "5174c56c-adbf-4f10-bb85-c49297b35911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84254", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420904211263807", "content": "CVE-2026-84254 click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84254https://wpscan.com/vulnerability/1dbb03eb-97ba-4a0f-aeea-6a38a47c95e5/#CVE_2026_84254#bot", "creation_timestamp": "2026-10-11T06:40:09.474545Z"} {"uuid": "5174c56c-adbf-4f10-bb85-c49297b35911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84254", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420904211263807", "content": "CVE-2026-84254 click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84254https://wpscan.com/vulnerability/1dbb03eb-97ba-4a0f-aeea-6a38a47c95e5/#CVE_2026_84254#bot", "creation_timestamp": "2026-10-11T06:40:09.474545Z"} https://vulnerability.circl.lu/sighting/5174c56c-adbf-4f10-bb85-c49297b35911/export Sun, 11 Oct 2026 06:40:09 +0000