https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 31 May 2026 18:19:32 +0000 https://vulnerability.circl.lu/sighting/0ee736a6-4052-4d55-957b-271b877043a4/export {"uuid": "0ee736a6-4052-4d55-957b-271b877043a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9108", "type": "seen", "source": "https://t.me/cvedetector/6712", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-9108 - WeChat Social Login for WordPress File Upload Vulnerability (Remote Code Execution)\", \n \"Content\": \"CVE ID : CVE-2024-9108 \nPublished : Oct. 1, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"01 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T11:03:52.000000Z"} {"uuid": "0ee736a6-4052-4d55-957b-271b877043a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9108", "type": "seen", "source": "https://t.me/cvedetector/6712", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-9108 - WeChat Social Login for WordPress File Upload Vulnerability (Remote Code Execution)\", \n \"Content\": \"CVE ID : CVE-2024-9108 \nPublished : Oct. 1, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"01 Oct 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-01T11:03:52.000000Z"} https://vulnerability.circl.lu/sighting/0ee736a6-4052-4d55-957b-271b877043a4/export Tue, 01 Oct 2024 11:03:52 +0000