<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 30 Jul 2026 16:16:14 +0000</lastBuildDate>
    <item>
      <title>567f5676-9ddb-43af-869e-b8e2c34844c2</title>
      <link>https://vulnerability.circl.lu/sighting/567f5676-9ddb-43af-869e-b8e2c34844c2/export</link>
      <description>{"uuid": "567f5676-9ddb-43af-869e-b8e2c34844c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtr7a4afg2l", "content": "\ud83d\udd34 CVE-2026-16610 - Critical (9.8)\n\nThe Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16610/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T06:00:36.738121Z"}</description>
      <content:encoded>{"uuid": "567f5676-9ddb-43af-869e-b8e2c34844c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtr7a4afg2l", "content": "\ud83d\udd34 CVE-2026-16610 - Critical (9.8)\n\nThe Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16610/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T06:00:36.738121Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/567f5676-9ddb-43af-869e-b8e2c34844c2/export</guid>
      <pubDate>Thu, 30 Jul 2026 06:00:36 +0000</pubDate>
    </item>
    <item>
      <title>6795f59a-a818-4d96-a41c-a9994925342f</title>
      <link>https://vulnerability.circl.lu/sighting/6795f59a-a818-4d96-a41c-a9994925342f/export</link>
      <description>{"uuid": "6795f59a-a818-4d96-a41c-a9994925342f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpuffg2e", "content": "Daily IT Security Digest \u2014 2026-07-30\ntracked as CVE-2026-16610 (CWE-434). Unauthenticated attackers can execute arbitrary code if the `[post_cf_form]` shortcode is publicly available. The vulnerability affects a significant portion of WordPress deployments. Site owners should update to the latest", "creation_timestamp": "2026-07-30T05:02:10.175897Z"}</description>
      <content:encoded>{"uuid": "6795f59a-a818-4d96-a41c-a9994925342f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpuffg2e", "content": "Daily IT Security Digest \u2014 2026-07-30\ntracked as CVE-2026-16610 (CWE-434). Unauthenticated attackers can execute arbitrary code if the `[post_cf_form]` shortcode is publicly available. The vulnerability affects a significant portion of WordPress deployments. Site owners should update to the latest", "creation_timestamp": "2026-07-30T05:02:10.175897Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6795f59a-a818-4d96-a41c-a9994925342f/export</guid>
      <pubDate>Thu, 30 Jul 2026 05:02:10 +0000</pubDate>
    </item>
    <item>
      <title>03829c2c-210a-4c3f-b8de-2f5a84d0710f</title>
      <link>https://vulnerability.circl.lu/sighting/03829c2c-210a-4c3f-b8de-2f5a84d0710f/export</link>
      <description>{"uuid": "03829c2c-210a-4c3f-b8de-2f5a84d0710f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpluu52j", "content": "Daily IT Security Digest \u2014 2026-07-30\nvendor patches immediately and review network exposure. [Source](https://securityonline.bsky.social)\n\n## 4. ASE Pro WordPress Plugin Critical RCE (CVE-2026-16610)\n\nThe ASE Pro plugin (version \u22648.9.0) for WordPress has a critical remote code execution", "creation_timestamp": "2026-07-30T05:02:09.700083Z"}</description>
      <content:encoded>{"uuid": "03829c2c-210a-4c3f-b8de-2f5a84d0710f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrtnwpluu52j", "content": "Daily IT Security Digest \u2014 2026-07-30\nvendor patches immediately and review network exposure. [Source](https://securityonline.bsky.social)\n\n## 4. ASE Pro WordPress Plugin Critical RCE (CVE-2026-16610)\n\nThe ASE Pro plugin (version \u22648.9.0) for WordPress has a critical remote code execution", "creation_timestamp": "2026-07-30T05:02:09.700083Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/03829c2c-210a-4c3f-b8de-2f5a84d0710f/export</guid>
      <pubDate>Thu, 30 Jul 2026 05:02:09 +0000</pubDate>
    </item>
    <item>
      <title>300f4f1d-818b-4735-b01f-0a8f84a95037</title>
      <link>https://vulnerability.circl.lu/sighting/300f4f1d-818b-4735-b01f-0a8f84a95037/export</link>
      <description>{"uuid": "300f4f1d-818b-4735-b01f-0a8f84a95037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnsz3jvs2r", "content": "CVE-2026-16610 - admin and site enhancements (ase) pro\nA WordPress plugin called Admin and Site Enhancements Pro has a security flaw that allows attackers to run code on your website without needing a password. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ase #CVE #infosec", "creation_timestamp": "2026-07-30T05:00:05.234142Z"}</description>
      <content:encoded>{"uuid": "300f4f1d-818b-4735-b01f-0a8f84a95037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnsz3jvs2r", "content": "CVE-2026-16610 - admin and site enhancements (ase) pro\nA WordPress plugin called Admin and Site Enhancements Pro has a security flaw that allows attackers to run code on your website without needing a password. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ase #CVE #infosec", "creation_timestamp": "2026-07-30T05:00:05.234142Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/300f4f1d-818b-4735-b01f-0a8f84a95037/export</guid>
      <pubDate>Thu, 30 Jul 2026 05:00:05 +0000</pubDate>
    </item>
    <item>
      <title>f5c32fd6-3da0-4f39-be30-f30b4d4e00b7</title>
      <link>https://vulnerability.circl.lu/sighting/f5c32fd6-3da0-4f39-be30-f30b4d4e00b7/export</link>
      <description>{"uuid": "f5c32fd6-3da0-4f39-be30-f30b4d4e00b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16610", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrtm5z3l4c2i", "content": "CRITICAL RCE in ASE Pro WordPress plugin (\u22648.9.0): Unauthenticated attackers can run code if [post_cf_form] is public. Patch or disable now. https://radar.offseq.com/threat/cve-2026-16610-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ase-admin-and-site-9666b4d559bc4aea #OffSeq #WordP...", "creation_timestamp": "2026-07-30T04:30:27.398421Z"}</description>
      <content:encoded>{"uuid": "f5c32fd6-3da0-4f39-be30-f30b4d4e00b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16610", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrtm5z3l4c2i", "content": "CRITICAL RCE in ASE Pro WordPress plugin (\u22648.9.0): Unauthenticated attackers can run code if [post_cf_form] is public. Patch or disable now. https://radar.offseq.com/threat/cve-2026-16610-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-ase-admin-and-site-9666b4d559bc4aea #OffSeq #WordP...", "creation_timestamp": "2026-07-30T04:30:27.398421Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f5c32fd6-3da0-4f39-be30-f30b4d4e00b7/export</guid>
      <pubDate>Thu, 30 Jul 2026 04:30:27 +0000</pubDate>
    </item>
  </channel>
</rss>
