https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 24 Aug 2026 20:42:03 +0000 https://vulnerability.circl.lu/sighting/d1c96692-2933-4235-9ca5-fadec9c98a3a/export {"uuid": "d1c96692-2933-4235-9ca5-fadec9c98a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtrenb63tt2o", "content": "\ud83d\udd34 CVE-2026-77002 - Critical (9.8)\n\nThe SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verifi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T18:00:52.751957Z"} {"uuid": "d1c96692-2933-4235-9ca5-fadec9c98a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtrenb63tt2o", "content": "\ud83d\udd34 CVE-2026-77002 - Critical (9.8)\n\nThe SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verifi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T18:00:52.751957Z"} https://vulnerability.circl.lu/sighting/d1c96692-2933-4235-9ca5-fadec9c98a3a/export Sun, 23 Aug 2026 18:00:52 +0000 https://vulnerability.circl.lu/sighting/d422fe4a-5550-45e4-ba96-455a3c4e089d/export {"uuid": "d422fe4a-5550-45e4-ba96-455a3c4e089d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtra4rtgo72p", "content": "CVE-2026-77002 - smilepass selfie login\nThe WordPress SmilePass Selfie Login add\u2011on (up to version 1.0.2) does not check who is actually trying to log in. Because of this, anyone can sign in as any existing user,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-23T16:40:04.322894Z"} {"uuid": "d422fe4a-5550-45e4-ba96-455a3c4e089d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77002", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtra4rtgo72p", "content": "CVE-2026-77002 - smilepass selfie login\nThe WordPress SmilePass Selfie Login add\u2011on (up to version 1.0.2) does not check who is actually trying to log in. Because of this, anyone can sign in as any existing user,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-23T16:40:04.322894Z"} https://vulnerability.circl.lu/sighting/d422fe4a-5550-45e4-ba96-455a3c4e089d/export Sun, 23 Aug 2026 16:40:04 +0000 https://vulnerability.circl.lu/sighting/d26947b8-1e8d-4b5d-a7f8-4a0df9911706/export {"uuid": "d26947b8-1e8d-4b5d-a7f8-4a0df9911706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnqwyfch424", "content": "SmilePass Selfie Login WP plugin (\u22641.0.2) has a CRITICAL flaw: attackers can bypass authentication and access any account. Remove or disable plugin until a fix is released. https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #O...", "creation_timestamp": "2026-08-22T07:30:25.144677Z"} {"uuid": "d26947b8-1e8d-4b5d-a7f8-4a0df9911706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnqwyfch424", "content": "SmilePass Selfie Login WP plugin (\u22641.0.2) has a CRITICAL flaw: attackers can bypass authentication and access any account. Remove or disable plugin until a fix is released. https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #O...", "creation_timestamp": "2026-08-22T07:30:25.144677Z"} https://vulnerability.circl.lu/sighting/d26947b8-1e8d-4b5d-a7f8-4a0df9911706/export Sat, 22 Aug 2026 07:30:25 +0000 https://vulnerability.circl.lu/sighting/e30a399c-1dfe-4fd1-8e6d-4c1bd72c8984/export {"uuid": "e30a399c-1dfe-4fd1-8e6d-4c1bd72c8984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137986193455712", "content": "CRITICAL: CVE-2026-77002 in SmilePass Selfie Login WP plugin (\u22641.0.2) allows full account takeover \u2014 no auth needed. Remove/disable plugin until patched. Details: https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #OffSeq #WordPress #Vuln #CVE202677002", "creation_timestamp": "2026-08-22T07:30:23.261960Z"} {"uuid": "e30a399c-1dfe-4fd1-8e6d-4c1bd72c8984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77002", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137986193455712", "content": "CRITICAL: CVE-2026-77002 in SmilePass Selfie Login WP plugin (\u22641.0.2) allows full account takeover \u2014 no auth needed. Remove/disable plugin until patched. Details: https://radar.offseq.com/threat/cve-2026-77002-cwe-287-improper-authentication-in-smilepass-selfie-login-581c897a80f66e83 #OffSeq #WordPress #Vuln #CVE202677002", "creation_timestamp": "2026-08-22T07:30:23.261960Z"} https://vulnerability.circl.lu/sighting/e30a399c-1dfe-4fd1-8e6d-4c1bd72c8984/export Sat, 22 Aug 2026 07:30:23 +0000