<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 23 Aug 2026 18:46:00 +0000</lastBuildDate>
    <item>
      <title>b852eac0-f837-4111-9eb0-3e51c01c6b85</title>
      <link>https://vulnerability.circl.lu/sighting/b852eac0-f837-4111-9eb0-3e51c01c6b85/export</link>
      <description>{"uuid": "b852eac0-f837-4111-9eb0-3e51c01c6b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fzkcx23d26e5l", "content": "CVE-2026-78003 - Mailgun for WordPress\nCVE ID : CVE-2026-78003\n \n Published : Aug. 22, 2026, 9:16 a.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up...", "creation_timestamp": "2026-08-22T10:46:57.352958Z"}</description>
      <content:encoded>{"uuid": "b852eac0-f837-4111-9eb0-3e51c01c6b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fzkcx23d26e5l", "content": "CVE-2026-78003 - Mailgun for WordPress\nCVE ID : CVE-2026-78003\n \n Published : Aug. 22, 2026, 9:16 a.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up...", "creation_timestamp": "2026-08-22T10:46:57.352958Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b852eac0-f837-4111-9eb0-3e51c01c6b85/export</guid>
      <pubDate>Sat, 22 Aug 2026 10:46:57 +0000</pubDate>
    </item>
    <item>
      <title>7fd2358c-167f-4654-9fce-b4c3c4084a15</title>
      <link>https://vulnerability.circl.lu/sighting/7fd2358c-167f-4654-9fce-b4c3c4084a15/export</link>
      <description>{"uuid": "7fd2358c-167f-4654-9fce-b4c3c4084a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtnzpgyur52e", "content": "\ud83d\udea8 CVE-2026-78003 \u2014 CVSS 9.8 CRITICAL\n\nThe Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78003\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T10:07:19.942998Z"}</description>
      <content:encoded>{"uuid": "7fd2358c-167f-4654-9fce-b4c3c4084a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtnzpgyur52e", "content": "\ud83d\udea8 CVE-2026-78003 \u2014 CVSS 9.8 CRITICAL\n\nThe Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78003\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T10:07:19.942998Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7fd2358c-167f-4654-9fce-b4c3c4084a15/export</guid>
      <pubDate>Sat, 22 Aug 2026 10:07:19 +0000</pubDate>
    </item>
    <item>
      <title>fe13a0c0-2d7a-49ab-ab81-84018f447a93</title>
      <link>https://vulnerability.circl.lu/sighting/fe13a0c0-2d7a-49ab-ab81-84018f447a93/export</link>
      <description>{"uuid": "fe13a0c0-2d7a-49ab-ab81-84018f447a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnzcjyhb324", "content": "\ud83d\udd34 CVE-2026-78003 - Critical (9.8)\n\nThe Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T10:00:03.352546Z"}</description>
      <content:encoded>{"uuid": "fe13a0c0-2d7a-49ab-ab81-84018f447a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnzcjyhb324", "content": "\ud83d\udd34 CVE-2026-78003 - Critical (9.8)\n\nThe Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T10:00:03.352546Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fe13a0c0-2d7a-49ab-ab81-84018f447a93/export</guid>
      <pubDate>Sat, 22 Aug 2026 10:00:03 +0000</pubDate>
    </item>
    <item>
      <title>dec0a778-3291-4436-ade0-ac5388aeafaa</title>
      <link>https://vulnerability.circl.lu/sighting/dec0a778-3291-4436-ade0-ac5388aeafaa/export</link>
      <description>{"uuid": "dec0a778-3291-4436-ade0-ac5388aeafaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtnxwwqkt42v", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3Mailgun (v2.2.0\u4ee5\u524d) \u3067\u3001\u4e0d\u6b63\u306a\u5165\u529b\u306b\u3088\u308a\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3092\u4ecb\u3057\u305fSSRF\u8106\u5f31\u6027\u304c\u5b58\u5728\u3002\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-78003 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-22T09:35:39.170459Z"}</description>
      <content:encoded>{"uuid": "dec0a778-3291-4436-ade0-ac5388aeafaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtnxwwqkt42v", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3Mailgun (v2.2.0\u4ee5\u524d) \u3067\u3001\u4e0d\u6b63\u306a\u5165\u529b\u306b\u3088\u308a\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3092\u4ecb\u3057\u305fSSRF\u8106\u5f31\u6027\u304c\u5b58\u5728\u3002\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-78003 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-22T09:35:39.170459Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dec0a778-3291-4436-ade0-ac5388aeafaa/export</guid>
      <pubDate>Sat, 22 Aug 2026 09:35:39 +0000</pubDate>
    </item>
    <item>
      <title>3cbc984a-dd62-404a-8754-0fcc79809fb6</title>
      <link>https://vulnerability.circl.lu/sighting/3cbc984a-dd62-404a-8754-0fcc79809fb6/export</link>
      <description>{"uuid": "3cbc984a-dd62-404a-8754-0fcc79809fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnxmy4vyp24", "content": "CVE-2026-78003 - mailgun for wordpress\nThe Mailgun for WordPress plugin (versions up to 2.2.0) lets anyone on the internet send crafted requests that use your site\u2019s Mailgun API key. An attacker could create\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mailgun #CVE #infosec", "creation_timestamp": "2026-08-22T09:30:04.978399Z"}</description>
      <content:encoded>{"uuid": "3cbc984a-dd62-404a-8754-0fcc79809fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnxmy4vyp24", "content": "CVE-2026-78003 - mailgun for wordpress\nThe Mailgun for WordPress plugin (versions up to 2.2.0) lets anyone on the internet send crafted requests that use your site\u2019s Mailgun API key. An attacker could create\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mailgun #CVE #infosec", "creation_timestamp": "2026-08-22T09:30:04.978399Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3cbc984a-dd62-404a-8754-0fcc79809fb6/export</guid>
      <pubDate>Sat, 22 Aug 2026 09:30:04 +0000</pubDate>
    </item>
    <item>
      <title>300b885e-03a5-4328-91c2-f3427766279a</title>
      <link>https://vulnerability.circl.lu/sighting/300b885e-03a5-4328-91c2-f3427766279a/export</link>
      <description>{"uuid": "300b885e-03a5-4328-91c2-f3427766279a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtnw5sgefb2m", "content": "\u26a0\ufe0f PATCH NOW\n\nA critical flaw in the Mailgun for WordPress plugin lets a stranger reroute your site's email and reset the admin password. No login needed.\n\nRuns on 80,000+ sites. Affects versions up to 2.2.0.\n\nFix: update to 2.2.1+. (CVE-2026-78003)", "creation_timestamp": "2026-08-22T09:03:42.657911Z"}</description>
      <content:encoded>{"uuid": "300b885e-03a5-4328-91c2-f3427766279a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78003", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtnw5sgefb2m", "content": "\u26a0\ufe0f PATCH NOW\n\nA critical flaw in the Mailgun for WordPress plugin lets a stranger reroute your site's email and reset the admin password. No login needed.\n\nRuns on 80,000+ sites. Affects versions up to 2.2.0.\n\nFix: update to 2.2.1+. (CVE-2026-78003)", "creation_timestamp": "2026-08-22T09:03:42.657911Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/300b885e-03a5-4328-91c2-f3427766279a/export</guid>
      <pubDate>Sat, 22 Aug 2026 09:03:42 +0000</pubDate>
    </item>
    <item>
      <title>158a5b9d-c099-4a59-b4e3-e47fee13f630</title>
      <link>https://vulnerability.circl.lu/sighting/158a5b9d-c099-4a59-b4e3-e47fee13f630/export</link>
      <description>{"uuid": "158a5b9d-c099-4a59-b4e3-e47fee13f630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnvxy3zpx2c", "content": "Mailgun for WordPress \u22642.2.0 hit by CRITICAL SSRF (CVE-2026-78003). Unauthenticated attackers can hijack admin resets via site API key. Update/disable plugin ASAP. https://radar.offseq.com/threat/cve-2026-78003-cwe-918-server-side-request-forgery-ssrf-in-mailgun-mailgun-for-wordpress-6ee94923f1ee...", "creation_timestamp": "2026-08-22T09:00:26.981179Z"}</description>
      <content:encoded>{"uuid": "158a5b9d-c099-4a59-b4e3-e47fee13f630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78003", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnvxy3zpx2c", "content": "Mailgun for WordPress \u22642.2.0 hit by CRITICAL SSRF (CVE-2026-78003). Unauthenticated attackers can hijack admin resets via site API key. Update/disable plugin ASAP. https://radar.offseq.com/threat/cve-2026-78003-cwe-918-server-side-request-forgery-ssrf-in-mailgun-mailgun-for-wordpress-6ee94923f1ee...", "creation_timestamp": "2026-08-22T09:00:26.981179Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/158a5b9d-c099-4a59-b4e3-e47fee13f630/export</guid>
      <pubDate>Sat, 22 Aug 2026 09:00:26 +0000</pubDate>
    </item>
    <item>
      <title>31692ab5-35ca-4ce8-a461-c6751883624c</title>
      <link>https://vulnerability.circl.lu/sighting/31692ab5-35ca-4ce8-a461-c6751883624c/export</link>
      <description>{"uuid": "31692ab5-35ca-4ce8-a461-c6751883624c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117138340214723722", "content": "CRITICAL: Mailgun for WordPress \u22642.2.0 vulnerable to SSRF (CVE-2026-78003). Attackers can exploit input validation in add_list() to hijack admin resets &amp;amp; compromise sites. Update/disable plugin now. https://radar.offseq.com/threat/cve-2026-78003-cwe-918-server-side-request-forgery-ssrf-in-mailgun-mailgun-for-wordpress-6ee94923f1ee4923 #OffSeq #WordPress #Infosec #SSRF", "creation_timestamp": "2026-08-22T09:00:25.307366Z"}</description>
      <content:encoded>{"uuid": "31692ab5-35ca-4ce8-a461-c6751883624c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78003", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117138340214723722", "content": "CRITICAL: Mailgun for WordPress \u22642.2.0 vulnerable to SSRF (CVE-2026-78003). Attackers can exploit input validation in add_list() to hijack admin resets &amp;amp; compromise sites. Update/disable plugin now. https://radar.offseq.com/threat/cve-2026-78003-cwe-918-server-side-request-forgery-ssrf-in-mailgun-mailgun-for-wordpress-6ee94923f1ee4923 #OffSeq #WordPress #Infosec #SSRF", "creation_timestamp": "2026-08-22T09:00:25.307366Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/31692ab5-35ca-4ce8-a461-c6751883624c/export</guid>
      <pubDate>Sat, 22 Aug 2026 09:00:25 +0000</pubDate>
    </item>
  </channel>
</rss>
