https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 27 Sep 2026 07:37:32 +0000 https://vulnerability.circl.lu/sighting/5d3d75d4-2f8f-46fd-8e7a-8134fde584c9/export {"uuid": "5d3d75d4-2f8f-46fd-8e7a-8134fde584c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhsng7xlp2j", "content": "miniOrange OTP Login plugin (\u22645.5.5) hit by CRITICAL auth bypass (CVE-2026-85984). Admin login possible with username only if risky options are enabled. Disable those settings ASAP. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-...", "creation_timestamp": "2026-09-27T03:00:28.069730Z"} {"uuid": "5d3d75d4-2f8f-46fd-8e7a-8134fde584c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwhsng7xlp2j", "content": "miniOrange OTP Login plugin (\u22645.5.5) hit by CRITICAL auth bypass (CVE-2026-85984). Admin login possible with username only if risky options are enabled. Disable those settings ASAP. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-...", "creation_timestamp": "2026-09-27T03:00:28.069730Z"} https://vulnerability.circl.lu/sighting/5d3d75d4-2f8f-46fd-8e7a-8134fde584c9/export Sun, 27 Sep 2026 03:00:28 +0000 https://vulnerability.circl.lu/sighting/7af375d4-347d-4a73-bf9b-c08b3af70c81/export {"uuid": "7af375d4-347d-4a73-bf9b-c08b3af70c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340767866919057", "content": "CVE-2026-85984: CRITICAL auth bypass in miniOrange OTP Login plugin \u22645.5.5. Attackers can log in as admin with just a username if certain options are enabled. Disable risky settings and check vendor guidance. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-verification-and-5c3999015784c4c9 #OffSeq #WordPress #CVE202685984", "creation_timestamp": "2026-09-27T03:00:26.254737Z"} {"uuid": "7af375d4-347d-4a73-bf9b-c08b3af70c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85984", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117340767866919057", "content": "CVE-2026-85984: CRITICAL auth bypass in miniOrange OTP Login plugin \u22645.5.5. Attackers can log in as admin with just a username if certain options are enabled. Disable risky settings and check vendor guidance. https://radar.offseq.com/threat/cve-2026-85984-cwe-287-improper-authentication-in-cyberlord92-miniorange-otp-login-verification-and-5c3999015784c4c9 #OffSeq #WordPress #CVE202685984", "creation_timestamp": "2026-09-27T03:00:26.254737Z"} https://vulnerability.circl.lu/sighting/7af375d4-347d-4a73-bf9b-c08b3af70c81/export Sun, 27 Sep 2026 03:00:26 +0000 https://vulnerability.circl.lu/sighting/90425d28-2bb7-425f-b23e-1c200cabdc14/export {"uuid": "90425d28-2bb7-425f-b23e-1c200cabdc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhhtu7qqz2m", "content": "\ud83d\udd34 CVE-2026-85984 - Critical (9.8)\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85984/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T23:47:13.105166Z"} {"uuid": "90425d28-2bb7-425f-b23e-1c200cabdc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhhtu7qqz2m", "content": "\ud83d\udd34 CVE-2026-85984 - Critical (9.8)\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85984/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T23:47:13.105166Z"} https://vulnerability.circl.lu/sighting/90425d28-2bb7-425f-b23e-1c200cabdc14/export Sat, 26 Sep 2026 23:47:13 +0000 https://vulnerability.circl.lu/sighting/ea363b39-fa6a-44ab-b5ee-dde51a810936/export {"uuid": "ea363b39-fa6a-44ab-b5ee-dde51a810936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhdjwsepw2o", "content": "CVE-2026-85984 - miniorange otp login, verification and sms notifications\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress can let someone sign in as an administrator without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cyberlord92 #CVE #infosec", "creation_timestamp": "2026-09-26T22:30:04.585847Z"} {"uuid": "ea363b39-fa6a-44ab-b5ee-dde51a810936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwhdjwsepw2o", "content": "CVE-2026-85984 - miniorange otp login, verification and sms notifications\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress can let someone sign in as an administrator without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cyberlord92 #CVE #infosec", "creation_timestamp": "2026-09-26T22:30:04.585847Z"} https://vulnerability.circl.lu/sighting/ea363b39-fa6a-44ab-b5ee-dde51a810936/export Sat, 26 Sep 2026 22:30:04 +0000 https://vulnerability.circl.lu/sighting/ea67f3ab-8f20-4918-a3fd-c780a17dd7db/export {"uuid": "ea67f3ab-8f20-4918-a3fd-c780a17dd7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwh6pbek3j2h", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cminiOrange OTP Login, Verification and SMS Notifications\u300d\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u7ba1\u7406\u8005\u304c\u7279\u5b9a\u8a2d\u5b9a\u2026\nCVE-2026-85984 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-26T21:03:34.709701Z"} {"uuid": "ea67f3ab-8f20-4918-a3fd-c780a17dd7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwh6pbek3j2h", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cminiOrange OTP Login, Verification and SMS Notifications\u300d\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u7ba1\u7406\u8005\u304c\u7279\u5b9a\u8a2d\u5b9a\u2026\nCVE-2026-85984 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-26T21:03:34.709701Z"} https://vulnerability.circl.lu/sighting/ea67f3ab-8f20-4918-a3fd-c780a17dd7db/export Sat, 26 Sep 2026 21:03:34 +0000 https://vulnerability.circl.lu/sighting/bc65c39f-cf89-444b-b7a6-20f1d3c79dc6/export {"uuid": "bc65c39f-cf89-444b-b7a6-20f1d3c79dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwh3lobomz2r", "content": "\ud83d\udea8 CVE-2026-85984 \u2014 CVSS 9.8 CRITICAL\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85984\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T20:07:52.676531Z"} {"uuid": "bc65c39f-cf89-444b-b7a6-20f1d3c79dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85984", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwh3lobomz2r", "content": "\ud83d\udea8 CVE-2026-85984 \u2014 CVSS 9.8 CRITICAL\n\nThe miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authenti...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85984\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T20:07:52.676531Z"} https://vulnerability.circl.lu/sighting/bc65c39f-cf89-444b-b7a6-20f1d3c79dc6/export Sat, 26 Sep 2026 20:07:52 +0000