<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 22:03:20 +0000</lastBuildDate>
    <item>
      <title>7a25f6d2-f350-448a-ac12-e4e3746c0776</title>
      <link>https://vulnerability.circl.lu/sighting/7a25f6d2-f350-448a-ac12-e4e3746c0776/export</link>
      <description>{"uuid": "7a25f6d2-f350-448a-ac12-e4e3746c0776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcrfndfzh22", "content": "CVE-2026-32557 - woocommerce appointments\nThe WooCommerce Appointments add\u2011on for WordPress (versions up to 5.3.2) can be accessed by anyone on the internet to run database commands. This could let an attacker view, change,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T20:20:05.703143Z"}</description>
      <content:encoded>{"uuid": "7a25f6d2-f350-448a-ac12-e4e3746c0776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcrfndfzh22", "content": "CVE-2026-32557 - woocommerce appointments\nThe WooCommerce Appointments add\u2011on for WordPress (versions up to 5.3.2) can be accessed by anyone on the internet to run database commands. This could let an attacker view, change,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T20:20:05.703143Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7a25f6d2-f350-448a-ac12-e4e3746c0776/export</guid>
      <pubDate>Wed, 07 Oct 2026 20:20:05 +0000</pubDate>
    </item>
    <item>
      <title>81415507-d9f9-442c-a7f4-df6e4bb8e3bf</title>
      <link>https://vulnerability.circl.lu/sighting/81415507-d9f9-442c-a7f4-df6e4bb8e3bf/export</link>
      <description>{"uuid": "81415507-d9f9-442c-a7f4-df6e4bb8e3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx7b2k2z2k2o", "content": "CVE-2026-32579: Kognetiks Chatbot for WordPress &amp;lt;=2.4.9, unauthenticated file upload. CVE-2026-32568: WooCommerce Designer Pro &amp;lt;=1.9.33, subscriber RCE. CVE-2026-32557: WooCommerce Appointments &amp;lt;=5.3.2, unauthenticated SQL injection. Update each plugin.", "creation_timestamp": "2026-10-06T10:49:34.199773Z"}</description>
      <content:encoded>{"uuid": "81415507-d9f9-442c-a7f4-df6e4bb8e3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mx7b2k2z2k2o", "content": "CVE-2026-32579: Kognetiks Chatbot for WordPress &amp;lt;=2.4.9, unauthenticated file upload. CVE-2026-32568: WooCommerce Designer Pro &amp;lt;=1.9.33, subscriber RCE. CVE-2026-32557: WooCommerce Appointments &amp;lt;=5.3.2, unauthenticated SQL injection. Update each plugin.", "creation_timestamp": "2026-10-06T10:49:34.199773Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/81415507-d9f9-442c-a7f4-df6e4bb8e3bf/export</guid>
      <pubDate>Tue, 06 Oct 2026 10:49:34 +0000</pubDate>
    </item>
    <item>
      <title>564e8112-92a6-4761-bad0-92612397c3c4</title>
      <link>https://vulnerability.circl.lu/sighting/564e8112-92a6-4761-bad0-92612397c3c4/export</link>
      <description>{"uuid": "564e8112-92a6-4761-bad0-92612397c3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76pp2lwf22", "content": "\ud83d\udea8 CVE-2026-32557 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in WooCommerce Appointments &amp;lt;= 5.3.2 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-32557\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:07:42.871425Z"}</description>
      <content:encoded>{"uuid": "564e8112-92a6-4761-bad0-92612397c3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32557", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx76pp2lwf22", "content": "\ud83d\udea8 CVE-2026-32557 \u2014 CVSS 9.3 CRITICAL\n\nUnauthenticated SQL Injection in WooCommerce Appointments &amp;lt;= 5.3.2 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-32557\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T10:07:42.871425Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/564e8112-92a6-4761-bad0-92612397c3c4/export</guid>
      <pubDate>Tue, 06 Oct 2026 10:07:42 +0000</pubDate>
    </item>
  </channel>
</rss>
