https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 13 Sep 2026 22:47:51 +0000 https://vulnerability.circl.lu/sighting/73c72b60-a28b-44cf-9514-2a2613ff5bb5/export {"uuid": "73c72b60-a28b-44cf-9514-2a2613ff5bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85681", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdkm2u2oc2r", "content": "\ud83d\udd34 CVE-2026-85681 - Critical (9.8)\n\nThe WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85681/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T17:00:42.472161Z"} {"uuid": "73c72b60-a28b-44cf-9514-2a2613ff5bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85681", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdkm2u2oc2r", "content": "\ud83d\udd34 CVE-2026-85681 - Critical (9.8)\n\nThe WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85681/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T17:00:42.472161Z"} https://vulnerability.circl.lu/sighting/73c72b60-a28b-44cf-9514-2a2613ff5bb5/export Sat, 12 Sep 2026 17:00:42 +0000 https://vulnerability.circl.lu/sighting/3471f420-a8ac-4973-9135-c32020af932e/export {"uuid": "3471f420-a8ac-4973-9135-c32020af932e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdkl2tykj2j", "content": "CVE-2026-85681 - wp component\nThe WP Component WordPress plugin up to version 2.2.4 lets anyone on the internet change any setting on your site because it does not verify who is making the request. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wpcomponent #unknown #CVE #infosec", "creation_timestamp": "2026-09-12T17:00:11.560599Z"} {"uuid": "3471f420-a8ac-4973-9135-c32020af932e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdkl2tykj2j", "content": "CVE-2026-85681 - wp component\nThe WP Component WordPress plugin up to version 2.2.4 lets anyone on the internet change any setting on your site because it does not verify who is making the request. An\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wpcomponent #unknown #CVE #infosec", "creation_timestamp": "2026-09-12T17:00:11.560599Z"} https://vulnerability.circl.lu/sighting/3471f420-a8ac-4973-9135-c32020af932e/export Sat, 12 Sep 2026 17:00:11 +0000 https://vulnerability.circl.lu/sighting/d97447b5-1322-4636-a7fb-3c7e7a61bcd0/export {"uuid": "d97447b5-1322-4636-a7fb-3c7e7a61bcd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85681", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvczt6g4sa2y", "content": "WP Component \u22642.2.4 has a CRITICAL privilege flaw: unauthenticated users can overwrite site options, risking WordPress takeover. Check vendor guidance & review affected sites ASAP. https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526e...", "creation_timestamp": "2026-09-12T12:00:27.333914Z"} {"uuid": "d97447b5-1322-4636-a7fb-3c7e7a61bcd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85681", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvczt6g4sa2y", "content": "WP Component \u22642.2.4 has a CRITICAL privilege flaw: unauthenticated users can overwrite site options, risking WordPress takeover. Check vendor guidance & review affected sites ASAP. https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526e...", "creation_timestamp": "2026-09-12T12:00:27.333914Z"} https://vulnerability.circl.lu/sighting/d97447b5-1322-4636-a7fb-3c7e7a61bcd0/export Sat, 12 Sep 2026 12:00:27 +0000 https://vulnerability.circl.lu/sighting/374a0634-6b36-4d5d-8103-917dd439274f/export {"uuid": "374a0634-6b36-4d5d-8103-917dd439274f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85681", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117257956517856963", "content": "CVE-2026-85681 (CRITICAL): WP Component plugin \u22642.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam", "creation_timestamp": "2026-09-12T12:00:25.164881Z"} {"uuid": "374a0634-6b36-4d5d-8103-917dd439274f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85681", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117257956517856963", "content": "CVE-2026-85681 (CRITICAL): WP Component plugin \u22642.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam", "creation_timestamp": "2026-09-12T12:00:25.164881Z"} https://vulnerability.circl.lu/sighting/374a0634-6b36-4d5d-8103-917dd439274f/export Sat, 12 Sep 2026 12:00:25 +0000