<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 12 Oct 2026 07:10:43 +0000</lastBuildDate>
    <item>
      <title>5e43a8da-4811-4e00-9508-b5b65798d938</title>
      <link>https://vulnerability.circl.lu/sighting/5e43a8da-4811-4e00-9508-b5b65798d938/export</link>
      <description>{"uuid": "5e43a8da-4811-4e00-9508-b5b65798d938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84734", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlzkq6cxs2l", "content": "CVE-2026-84734 - mindstien quick login\nThe Mindstien Quick Login plug\u2011in for WordPress does not properly check a value it receives, so anyone can send a special request and gain the site\u2019s administrator session. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-10-11T12:40:04.213648Z"}</description>
      <content:encoded>{"uuid": "5e43a8da-4811-4e00-9508-b5b65798d938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84734", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxlzkq6cxs2l", "content": "CVE-2026-84734 - mindstien quick login\nThe Mindstien Quick Login plug\u2011in for WordPress does not properly check a value it receives, so anyone can send a special request and gain the site\u2019s administrator session. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-10-11T12:40:04.213648Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5e43a8da-4811-4e00-9508-b5b65798d938/export</guid>
      <pubDate>Sun, 11 Oct 2026 12:40:04 +0000</pubDate>
    </item>
    <item>
      <title>3d54e37f-d174-49c6-8ce2-1594b5a34ac0</title>
      <link>https://vulnerability.circl.lu/sighting/3d54e37f-d174-49c6-8ce2-1594b5a34ac0/export</link>
      <description>{"uuid": "3d54e37f-d174-49c6-8ce2-1594b5a34ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84734", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420917431738760", "content": "CVE-2026-84734 Mindstien Quick Login &amp;lt;= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is configured with.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84734https://wpscan.com/vulnerability/648d461c-6610-4566-a310-b02187d68cc9/#CVE_2026_84734#bot", "creation_timestamp": "2026-10-11T06:43:31.124685Z"}</description>
      <content:encoded>{"uuid": "3d54e37f-d174-49c6-8ce2-1594b5a34ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84734", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420917431738760", "content": "CVE-2026-84734 Mindstien Quick Login &amp;lt;= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress plugin through 1.0 is configured with.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84734https://wpscan.com/vulnerability/648d461c-6610-4566-a310-b02187d68cc9/#CVE_2026_84734#bot", "creation_timestamp": "2026-10-11T06:43:31.124685Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3d54e37f-d174-49c6-8ce2-1594b5a34ac0/export</guid>
      <pubDate>Sun, 11 Oct 2026 06:43:31 +0000</pubDate>
    </item>
  </channel>
</rss>
