<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 23 Aug 2026 13:13:50 +0000</lastBuildDate>
    <item>
      <title>b5b1d513-4ae5-475b-b116-cbbc2d32d4f2</title>
      <link>https://vulnerability.circl.lu/sighting/b5b1d513-4ae5-475b-b116-cbbc2d32d4f2/export</link>
      <description>{"uuid": "b5b1d513-4ae5-475b-b116-cbbc2d32d4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtkjkevlxp2v", "content": "CVE-2026-75860: toma de control total en WordPress\n\nPlugin JSON Options en WordPress con CVE-2026-75860: cualquier atacante sin contrase\u00f1a puede tomar control total. Verific\u00e1 si tu sitio est\u00e1 expuesto ahora.\n\n#cve202675860 #jsonoptions #wordpress #escaladadeprivilegios #vulnerabilidadcr\u00edtica", "creation_timestamp": "2026-08-21T00:40:06.451855Z"}</description>
      <content:encoded>{"uuid": "b5b1d513-4ae5-475b-b116-cbbc2d32d4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtkjkevlxp2v", "content": "CVE-2026-75860: toma de control total en WordPress\n\nPlugin JSON Options en WordPress con CVE-2026-75860: cualquier atacante sin contrase\u00f1a puede tomar control total. Verific\u00e1 si tu sitio est\u00e1 expuesto ahora.\n\n#cve202675860 #jsonoptions #wordpress #escaladadeprivilegios #vulnerabilidadcr\u00edtica", "creation_timestamp": "2026-08-21T00:40:06.451855Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b5b1d513-4ae5-475b-b116-cbbc2d32d4f2/export</guid>
      <pubDate>Fri, 21 Aug 2026 00:40:06 +0000</pubDate>
    </item>
    <item>
      <title>85d45f18-177b-4d42-b332-f8c307d39fb9</title>
      <link>https://vulnerability.circl.lu/sighting/85d45f18-177b-4d42-b332-f8c307d39fb9/export</link>
      <description>{"uuid": "85d45f18-177b-4d42-b332-f8c307d39fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtj7hywmk523", "content": "\ud83d\udea8 CVE-2026-75860 \u2014 CVSS 9.8 CRITICAL\n\nThe JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T12:07:09.237529Z"}</description>
      <content:encoded>{"uuid": "85d45f18-177b-4d42-b332-f8c307d39fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtj7hywmk523", "content": "\ud83d\udea8 CVE-2026-75860 \u2014 CVSS 9.8 CRITICAL\n\nThe JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T12:07:09.237529Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/85d45f18-177b-4d42-b332-f8c307d39fb9/export</guid>
      <pubDate>Thu, 20 Aug 2026 12:07:09 +0000</pubDate>
    </item>
    <item>
      <title>c1809561-3289-4de9-8dc2-84a89fb8b94e</title>
      <link>https://vulnerability.circl.lu/sighting/c1809561-3289-4de9-8dc2-84a89fb8b94e/export</link>
      <description>{"uuid": "c1809561-3289-4de9-8dc2-84a89fb8b94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiyer75i523", "content": "CVE-2026-75860 - json options\nAn outdated WordPress plugin allows unauthenticated users to modify settings. This can lead to unauthorized user registration and potential site takeover. Update the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonoptions #unknown #CVE #infosec", "creation_timestamp": "2026-08-20T10:00:05.205702Z"}</description>
      <content:encoded>{"uuid": "c1809561-3289-4de9-8dc2-84a89fb8b94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtiyer75i523", "content": "CVE-2026-75860 - json options\nAn outdated WordPress plugin allows unauthenticated users to modify settings. This can lead to unauthorized user registration and potential site takeover. Update the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonoptions #unknown #CVE #infosec", "creation_timestamp": "2026-08-20T10:00:05.205702Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c1809561-3289-4de9-8dc2-84a89fb8b94e/export</guid>
      <pubDate>Thu, 20 Aug 2026 10:00:05 +0000</pubDate>
    </item>
    <item>
      <title>489cdcdc-90f2-4e04-aa8d-90dfcac0f3de</title>
      <link>https://vulnerability.circl.lu/sighting/489cdcdc-90f2-4e04-aa8d-90dfcac0f3de/export</link>
      <description>{"uuid": "489cdcdc-90f2-4e04-aa8d-90dfcac0f3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtipz7f4er27", "content": "JSON Options plugin (\u22640.0.4) hit by CRITICAL vuln (CVE-2026-75860): unauthenticated users can escalate to admin \u2014 full WordPress site takeover possible. Remove or restrict plugin now. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b...", "creation_timestamp": "2026-08-20T07:30:27.252679Z"}</description>
      <content:encoded>{"uuid": "489cdcdc-90f2-4e04-aa8d-90dfcac0f3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtipz7f4er27", "content": "JSON Options plugin (\u22640.0.4) hit by CRITICAL vuln (CVE-2026-75860): unauthenticated users can escalate to admin \u2014 full WordPress site takeover possible. Remove or restrict plugin now. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b...", "creation_timestamp": "2026-08-20T07:30:27.252679Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/489cdcdc-90f2-4e04-aa8d-90dfcac0f3de/export</guid>
      <pubDate>Thu, 20 Aug 2026 07:30:27 +0000</pubDate>
    </item>
    <item>
      <title>31accb5e-a35d-48fa-a3fc-4dda3f3944b0</title>
      <link>https://vulnerability.circl.lu/sighting/31accb5e-a35d-48fa-a3fc-4dda3f3944b0/export</link>
      <description>{"uuid": "31accb5e-a35d-48fa-a3fc-4dda3f3944b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117126661700027750", "content": "CVE-2026-75860: CRITICAL privilege escalation in JSON Options \u22640.0.4. Unauthenticated attackers can update WordPress options &amp;amp; gain admin access. Remove or disable plugin until fix is available. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b89b1 #OffSeq #WordPress #CVE202675860", "creation_timestamp": "2026-08-20T07:30:25.140616Z"}</description>
      <content:encoded>{"uuid": "31accb5e-a35d-48fa-a3fc-4dda3f3944b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75860", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117126661700027750", "content": "CVE-2026-75860: CRITICAL privilege escalation in JSON Options \u22640.0.4. Unauthenticated attackers can update WordPress options &amp;amp; gain admin access. Remove or disable plugin until fix is available. Full site takeover risk. https://radar.offseq.com/threat/cve-2026-75860-cwe-269-improper-privilege-management-in-json-options-5e170a19118b89b1 #OffSeq #WordPress #CVE202675860", "creation_timestamp": "2026-08-20T07:30:25.140616Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/31accb5e-a35d-48fa-a3fc-4dda3f3944b0/export</guid>
      <pubDate>Thu, 20 Aug 2026 07:30:25 +0000</pubDate>
    </item>
  </channel>
</rss>
