<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 25 Sep 2026 13:42:39 +0000</lastBuildDate>
    <item>
      <title>03474b88-9c6a-430d-9416-817a10ca01ac</title>
      <link>https://vulnerability.circl.lu/sighting/03474b88-9c6a-430d-9416-817a10ca01ac/export</link>
      <description>{"uuid": "03474b88-9c6a-430d-9416-817a10ca01ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117309780909682788", "content": "CVE-2026-87909 RCE in WP Photo Album Plus, CVSS 7.5, unpatched. Subscribers can run code via the ImageMagick filename flaw. Disable or patch now. https://www.valtersit.com/cve/CVE-2026-87909/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-21T15:40:03.663950Z"}</description>
      <content:encoded>{"uuid": "03474b88-9c6a-430d-9416-817a10ca01ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117309780909682788", "content": "CVE-2026-87909 RCE in WP Photo Album Plus, CVSS 7.5, unpatched. Subscribers can run code via the ImageMagick filename flaw. Disable or patch now. https://www.valtersit.com/cve/CVE-2026-87909/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-21T15:40:03.663950Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/03474b88-9c6a-430d-9416-817a10ca01ac/export</guid>
      <pubDate>Mon, 21 Sep 2026 15:40:03 +0000</pubDate>
    </item>
    <item>
      <title>79868b9c-47dd-4678-be9a-5abf5a8a0170</title>
      <link>https://vulnerability.circl.lu/sighting/79868b9c-47dd-4678-be9a-5abf5a8a0170/export</link>
      <description>{"uuid": "79868b9c-47dd-4678-be9a-5abf5a8a0170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117309704660186325", "content": "CVE-2026-87909 RCE in WP Photo Album Plus, CVSS 7.5, unpatched. Subscribers can run code via the ImageMagick filename flaw. Disable or patch now. https://www.valtersit.com/cve/CVE-2026-87909/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-21T15:20:46.499189Z"}</description>
      <content:encoded>{"uuid": "79868b9c-47dd-4678-be9a-5abf5a8a0170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117309704660186325", "content": "CVE-2026-87909 RCE in WP Photo Album Plus, CVSS 7.5, unpatched. Subscribers can run code via the ImageMagick filename flaw. Disable or patch now. https://www.valtersit.com/cve/CVE-2026-87909/ #CVE #WordPress #infosec", "creation_timestamp": "2026-09-21T15:20:46.499189Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/79868b9c-47dd-4678-be9a-5abf5a8a0170/export</guid>
      <pubDate>Mon, 21 Sep 2026 15:20:46 +0000</pubDate>
    </item>
    <item>
      <title>bab1af1f-0357-4e9b-b2cc-029526f7890c</title>
      <link>https://vulnerability.circl.lu/sighting/bab1af1f-0357-4e9b-b2cc-029526f7890c/export</link>
      <description>{"uuid": "bab1af1f-0357-4e9b-b2cc-029526f7890c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4l7nwr52b", "content": "\ud83d\udfe0 CVE-2026-87909 - High (7.5)\n\nThe WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87909/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:57.248662Z"}</description>
      <content:encoded>{"uuid": "bab1af1f-0357-4e9b-b2cc-029526f7890c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87909", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4l7nwr52b", "content": "\ud83d\udfe0 CVE-2026-87909 - High (7.5)\n\nThe WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87909/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:57.248662Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bab1af1f-0357-4e9b-b2cc-029526f7890c/export</guid>
      <pubDate>Sat, 19 Sep 2026 07:04:57 +0000</pubDate>
    </item>
  </channel>
</rss>
