https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 20:55:25 +0000 https://vulnerability.circl.lu/sighting/90397a75-949b-43d9-b1ea-892df53ec5b0/export {"uuid": "90397a75-949b-43d9-b1ea-892df53ec5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89287", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420983524966549", "content": "CVE-2026-89287 ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89287https://wpscan.com/vulnerability/9194818b-75c8-40f0-baba-6dc84d2cfe7d/#CVE_2026_89287#bot", "creation_timestamp": "2026-10-11T07:00:19.737127Z"} {"uuid": "90397a75-949b-43d9-b1ea-892df53ec5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89287", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420983524966549", "content": "CVE-2026-89287 ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89287https://wpscan.com/vulnerability/9194818b-75c8-40f0-baba-6dc84d2cfe7d/#CVE_2026_89287#bot", "creation_timestamp": "2026-10-11T07:00:19.737127Z"} https://vulnerability.circl.lu/sighting/90397a75-949b-43d9-b1ea-892df53ec5b0/export Sun, 11 Oct 2026 07:00:19 +0000