https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 15:14:29 +0000 https://vulnerability.circl.lu/sighting/3fb6947f-3954-4d0f-9334-0577990cbb65/export {"uuid": "3fb6947f-3954-4d0f-9334-0577990cbb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxlj6vw3px2b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-75650: 7 interactions\nCVE-2026-107406: 6 interactions\nCVE-2026-104398: 4 interactions\n", "creation_timestamp": "2026-10-11T07:47:07.765883Z"} {"uuid": "3fb6947f-3954-4d0f-9334-0577990cbb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxlj6vw3px2b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 78 interactions\nCVE-2026-88779: 47 interactions\nCVE-2026-102255: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-75650: 7 interactions\nCVE-2026-107406: 6 interactions\nCVE-2026-104398: 4 interactions\n", "creation_timestamp": "2026-10-11T07:47:07.765883Z"} https://vulnerability.circl.lu/sighting/3fb6947f-3954-4d0f-9334-0577990cbb65/export Sun, 11 Oct 2026 07:47:07 +0000 https://vulnerability.circl.lu/sighting/d3ffdc0d-4360-4808-ad7b-26c6fce5b66d/export {"uuid": "d3ffdc0d-4360-4808-ad7b-26c6fce5b66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxkp4tbnht2j", "content": "VillaTheme AFFI for WooCommerce (<=1.0.10) hit by CRITICAL deserialization bug (CVE-2026-104398) \ud83d\uded1 Allows remote code execution, no auth needed. Disable or restrict plugin use until fixed. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-villatheme-affi-affiliate...", "creation_timestamp": "2026-10-11T00:00:41.001811Z"} {"uuid": "d3ffdc0d-4360-4808-ad7b-26c6fce5b66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxkp4tbnht2j", "content": "VillaTheme AFFI for WooCommerce (<=1.0.10) hit by CRITICAL deserialization bug (CVE-2026-104398) \ud83d\uded1 Allows remote code execution, no auth needed. Disable or restrict plugin use until fixed. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-villatheme-affi-affiliate...", "creation_timestamp": "2026-10-11T00:00:41.001811Z"} https://vulnerability.circl.lu/sighting/d3ffdc0d-4360-4808-ad7b-26c6fce5b66d/export Sun, 11 Oct 2026 00:00:41 +0000 https://vulnerability.circl.lu/sighting/c262e7f3-24f0-4ed9-8ac4-b37ee09f0550/export {"uuid": "c262e7f3-24f0-4ed9-8ac4-b37ee09f0550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117419333265810798", "content": "Deserialization of untrusted data in VillaTheme AFFI for WooCommerce (<=1.0.10) \u2014 CVE-2026-104398 (CRITICAL, CVSS 9.8) enables remote code execution with no auth/user input. Restrict or remove plugin until patched. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-villatheme-affi-affiliate-marketing-for-woocommerce-3d8236ba80fe5b3c #OffSeq #CVE2026104398 #WordPress #Infosec", "creation_timestamp": "2026-10-11T00:00:40.588721Z"} {"uuid": "c262e7f3-24f0-4ed9-8ac4-b37ee09f0550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117419333265810798", "content": "Deserialization of untrusted data in VillaTheme AFFI for WooCommerce (<=1.0.10) \u2014 CVE-2026-104398 (CRITICAL, CVSS 9.8) enables remote code execution with no auth/user input. Restrict or remove plugin until patched. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-villatheme-affi-affiliate-marketing-for-woocommerce-3d8236ba80fe5b3c #OffSeq #CVE2026104398 #WordPress #Infosec", "creation_timestamp": "2026-10-11T00:00:40.588721Z"} https://vulnerability.circl.lu/sighting/c262e7f3-24f0-4ed9-8ac4-b37ee09f0550/export Sun, 11 Oct 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/a9050c77-257d-4b81-9cf1-bf7d8a0d41d6/export {"uuid": "a9050c77-257d-4b81-9cf1-bf7d8a0d41d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxkgrz3ii72p", "content": "WooCommerce\u7528AFFI\u30d7\u30e9\u30b0\u30a4\u30f3\uff08\uff5e1.0.10\uff09\u306b\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30bc\u30fc\u30b7\u30e7\u30f3\u306b\u3088\u308b\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-104398 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-10-10T21:31:27.512365Z"} {"uuid": "a9050c77-257d-4b81-9cf1-bf7d8a0d41d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxkgrz3ii72p", "content": "WooCommerce\u7528AFFI\u30d7\u30e9\u30b0\u30a4\u30f3\uff08\uff5e1.0.10\uff09\u306b\u3001\u4fe1\u983c\u3067\u304d\u306a\u3044\u30c7\u30fc\u30bf\u306e\u30c7\u30b7\u30ea\u30a2\u30e9\u30a4\u30bc\u30fc\u30b7\u30e7\u30f3\u306b\u3088\u308b\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-104398 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-10-10T21:31:27.512365Z"} https://vulnerability.circl.lu/sighting/a9050c77-257d-4b81-9cf1-bf7d8a0d41d6/export Sat, 10 Oct 2026 21:31:27 +0000 https://vulnerability.circl.lu/sighting/4fef0c1b-543f-4199-b6cd-f337b2d671a3/export {"uuid": "4fef0c1b-543f-4199-b6cd-f337b2d671a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju7uhs2n", "content": "1. CVE-2026-104398 \u00b7 3 people\n\ud83d\udfe5 Critical 9.8 \u00b7 VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerce\n\nWordPress AFFI \u2013 Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability", "creation_timestamp": "2026-10-10T18:27:57.776514Z"} {"uuid": "4fef0c1b-543f-4199-b6cd-f337b2d671a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju7uhs2n", "content": "1. CVE-2026-104398 \u00b7 3 people\n\ud83d\udfe5 Critical 9.8 \u00b7 VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerce\n\nWordPress AFFI \u2013 Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability", "creation_timestamp": "2026-10-10T18:27:57.776514Z"} https://vulnerability.circl.lu/sighting/4fef0c1b-543f-4199-b6cd-f337b2d671a3/export Sat, 10 Oct 2026 18:27:57 +0000 https://vulnerability.circl.lu/sighting/8004960e-3481-4925-bdd6-961e7bdad41a/export {"uuid": "8004960e-3481-4925-bdd6-961e7bdad41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju6bos2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-104398 \u00b7 3 people\n2. CVE-2026-105889 \u00b7 2 people\n3. CVE-2026-93945 \u00b7 2 people\n4. CVE-2026-102126 \u00b7 1 person\n5. CVE-2026-103071 \u00b7 1 person\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "creation_timestamp": "2026-10-10T18:27:57.134186Z"} {"uuid": "8004960e-3481-4925-bdd6-961e7bdad41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju6bos2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-104398 \u00b7 3 people\n2. CVE-2026-105889 \u00b7 2 people\n3. CVE-2026-93945 \u00b7 2 people\n4. CVE-2026-102126 \u00b7 1 person\n5. CVE-2026-103071 \u00b7 1 person\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "creation_timestamp": "2026-10-10T18:27:57.134186Z"} https://vulnerability.circl.lu/sighting/8004960e-3481-4925-bdd6-961e7bdad41a/export Sat, 10 Oct 2026 18:27:57 +0000 https://vulnerability.circl.lu/sighting/cef28b82-f489-4e84-bf92-9f80c37c83fe/export {"uuid": "cef28b82-f489-4e84-bf92-9f80c37c83fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxk3jxnsam2l", "content": "CVE-2026-104398 - affi \u2013 affiliate marketing for woocommerce\nThe AFFI \u2013 Affiliate Marketing for WooCommerce plugin for WordPress (versions up to 1.0.10) can be tricked into processing crafted data, which may let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#villatheme #CVE #infosec", "creation_timestamp": "2026-10-10T18:10:06.164644Z"} {"uuid": "cef28b82-f489-4e84-bf92-9f80c37c83fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxk3jxnsam2l", "content": "CVE-2026-104398 - affi \u2013 affiliate marketing for woocommerce\nThe AFFI \u2013 Affiliate Marketing for WooCommerce plugin for WordPress (versions up to 1.0.10) can be tricked into processing crafted data, which may let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#villatheme #CVE #infosec", "creation_timestamp": "2026-10-10T18:10:06.164644Z"} https://vulnerability.circl.lu/sighting/cef28b82-f489-4e84-bf92-9f80c37c83fe/export Sat, 10 Oct 2026 18:10:06 +0000 https://vulnerability.circl.lu/sighting/5c2cafd6-81c4-4a4f-89b5-26af37f9159e/export {"uuid": "5c2cafd6-81c4-4a4f-89b5-26af37f9159e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxk3eswq4s2l", "content": "\ud83d\udea8 CVE-2026-104398 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerce af...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104398\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T18:07:13.542149Z"} {"uuid": "5c2cafd6-81c4-4a4f-89b5-26af37f9159e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxk3eswq4s2l", "content": "\ud83d\udea8 CVE-2026-104398 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerce af...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104398\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T18:07:13.542149Z"} https://vulnerability.circl.lu/sighting/5c2cafd6-81c4-4a4f-89b5-26af37f9159e/export Sat, 10 Oct 2026 18:07:13 +0000 https://vulnerability.circl.lu/sighting/b71aa39d-4ea3-4c1b-8782-b8732d111bd2/export {"uuid": "b71aa39d-4ea3-4c1b-8782-b8732d111bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk2yekknc2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-103071 \u00b7 1 person\n2. CVE-2026-104398 \u00b7 1 person\n3. CVE-2026-108161 \u00b7 1 person", "creation_timestamp": "2026-10-10T18:00:16.551785Z"} {"uuid": "b71aa39d-4ea3-4c1b-8782-b8732d111bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk2yekknc2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-103071 \u00b7 1 person\n2. CVE-2026-104398 \u00b7 1 person\n3. CVE-2026-108161 \u00b7 1 person", "creation_timestamp": "2026-10-10T18:00:16.551785Z"} https://vulnerability.circl.lu/sighting/b71aa39d-4ea3-4c1b-8782-b8732d111bd2/export Sat, 10 Oct 2026 18:00:16 +0000 https://vulnerability.circl.lu/sighting/9b20dd26-953c-4164-95d2-fca8e29819e3/export {"uuid": "9b20dd26-953c-4164-95d2-fca8e29819e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/boe2lqss36rsv", "content": "CVE-2026-104398 - WordPress AFFI \u2013 Affiliate Marketing for WooCommerce plugin\nCVE ID : CVE-2026-104398\n \n Published : Oct. 10, 2026, 5 p.m. | 22\u00a0minutes ago\n \n Description : Deserialization of Untrusted Data vulnerability in VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerc...", "creation_timestamp": "2026-10-10T17:49:09.761009Z"} {"uuid": "9b20dd26-953c-4164-95d2-fca8e29819e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/boe2lqss36rsv", "content": "CVE-2026-104398 - WordPress AFFI \u2013 Affiliate Marketing for WooCommerce plugin\nCVE ID : CVE-2026-104398\n \n Published : Oct. 10, 2026, 5 p.m. | 22\u00a0minutes ago\n \n Description : Deserialization of Untrusted Data vulnerability in VillaTheme AFFI \u2013 Affiliate Marketing for WooCommerc...", "creation_timestamp": "2026-10-10T17:49:09.761009Z"} https://vulnerability.circl.lu/sighting/9b20dd26-953c-4164-95d2-fca8e29819e3/export Sat, 10 Oct 2026 17:49:09 +0000