<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 20 Sep 2026 04:29:25 +0000</lastBuildDate>
    <item>
      <title>e0bde1d7-6d9b-498b-b0a2-b548da5b3198</title>
      <link>https://vulnerability.circl.lu/sighting/e0bde1d7-6d9b-498b-b0a2-b548da5b3198/export</link>
      <description>{"uuid": "e0bde1d7-6d9b-498b-b0a2-b548da5b3198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89274", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4kqj7ab2s", "content": "\ud83d\udd34 CVE-2026-89274 - Critical (9.1)\n\nThe WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all ve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89274/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:41.179869Z"}</description>
      <content:encoded>{"uuid": "e0bde1d7-6d9b-498b-b0a2-b548da5b3198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89274", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4kqj7ab2s", "content": "\ud83d\udd34 CVE-2026-89274 - Critical (9.1)\n\nThe WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all ve...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89274/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:41.179869Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e0bde1d7-6d9b-498b-b0a2-b548da5b3198/export</guid>
      <pubDate>Sat, 19 Sep 2026 07:04:41 +0000</pubDate>
    </item>
    <item>
      <title>8663b018-7b22-487d-9bcf-368c85d9bc62</title>
      <link>https://vulnerability.circl.lu/sighting/8663b018-7b22-487d-9bcf-368c85d9bc62/export</link>
      <description>{"uuid": "8663b018-7b22-487d-9bcf-368c85d9bc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89274", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvu36redsw25", "content": "CVE-2026-89274\nThe WP Recipe Maker plugin for WordPress lets anyone who can post a comment that gets approved add code that runs on every recipe page. This could cause hidden data or other site content to be shown to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-19T06:40:05.326625Z"}</description>
      <content:encoded>{"uuid": "8663b018-7b22-487d-9bcf-368c85d9bc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89274", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvu36redsw25", "content": "CVE-2026-89274\nThe WP Recipe Maker plugin for WordPress lets anyone who can post a comment that gets approved add code that runs on every recipe page. This could cause hidden data or other site content to be shown to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-19T06:40:05.326625Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8663b018-7b22-487d-9bcf-368c85d9bc62/export</guid>
      <pubDate>Sat, 19 Sep 2026 06:40:05 +0000</pubDate>
    </item>
    <item>
      <title>b5b9393f-f2d3-40cf-84f4-502eacb342df</title>
      <link>https://vulnerability.circl.lu/sighting/b5b9393f-f2d3-40cf-84f4-502eacb342df/export</link>
      <description>{"uuid": "b5b9393f-f2d3-40cf-84f4-502eacb342df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89274", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvtvoxpiyd2u", "content": "Daily IT Security Digest \u2014 2026-09-19\nAttackers can trigger arbitrary shortcode execution on recipe pages without authentication. Upgrade to the latest version immediately.\n   \u2014 Source: [offseq](https://radar.offseq.com/threat/wp-recipe-maker-cve-2026-89274),", "creation_timestamp": "2026-09-19T05:01:46.285630Z"}</description>
      <content:encoded>{"uuid": "b5b9393f-f2d3-40cf-84f4-502eacb342df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89274", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvtvoxpiyd2u", "content": "Daily IT Security Digest \u2014 2026-09-19\nAttackers can trigger arbitrary shortcode execution on recipe pages without authentication. Upgrade to the latest version immediately.\n   \u2014 Source: [offseq](https://radar.offseq.com/threat/wp-recipe-maker-cve-2026-89274),", "creation_timestamp": "2026-09-19T05:01:46.285630Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b5b9393f-f2d3-40cf-84f4-502eacb342df/export</guid>
      <pubDate>Sat, 19 Sep 2026 05:01:46 +0000</pubDate>
    </item>
    <item>
      <title>684ebba1-b869-40a2-896f-ba4f2625f96f</title>
      <link>https://vulnerability.circl.lu/sighting/684ebba1-b869-40a2-896f-ba4f2625f96f/export</link>
      <description>{"uuid": "684ebba1-b869-40a2-896f-ba4f2625f96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89274", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvtvoxh6cl2g", "content": "Daily IT Security Digest \u2014 2026-09-19\n# Daily IT Security Digest \u2014 2026-09-19\n\n1. **WP Recipe Maker: Critical Code Injection (CVE-2026-89274)**\n   WordPress plugin WP Recipe Maker (\u226410.8.1) is vulnerable to unauthenticated arbitrary shortcode execution via unsanitized shortcodes in recipe comment", "creation_timestamp": "2026-09-19T05:01:45.763261Z"}</description>
      <content:encoded>{"uuid": "684ebba1-b869-40a2-896f-ba4f2625f96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89274", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvtvoxh6cl2g", "content": "Daily IT Security Digest \u2014 2026-09-19\n# Daily IT Security Digest \u2014 2026-09-19\n\n1. **WP Recipe Maker: Critical Code Injection (CVE-2026-89274)**\n   WordPress plugin WP Recipe Maker (\u226410.8.1) is vulnerable to unauthenticated arbitrary shortcode execution via unsanitized shortcodes in recipe comment", "creation_timestamp": "2026-09-19T05:01:45.763261Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/684ebba1-b869-40a2-896f-ba4f2625f96f/export</guid>
      <pubDate>Sat, 19 Sep 2026 05:01:45 +0000</pubDate>
    </item>
    <item>
      <title>812d9a08-77fc-445a-8be6-eab93899a37b</title>
      <link>https://vulnerability.circl.lu/sighting/812d9a08-77fc-445a-8be6-eab93899a37b/export</link>
      <description>{"uuid": "812d9a08-77fc-445a-8be6-eab93899a37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89274", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvtsnruebc2r", "content": "\ud83d\udea8 CVE-2026-89274 \u2014 CVSS 9.1 CRITICAL\n\nThe WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89274\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T04:07:25.163044Z"}</description>
      <content:encoded>{"uuid": "812d9a08-77fc-445a-8be6-eab93899a37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89274", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvtsnruebc2r", "content": "\ud83d\udea8 CVE-2026-89274 \u2014 CVSS 9.1 CRITICAL\n\nThe WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89274\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T04:07:25.163044Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/812d9a08-77fc-445a-8be6-eab93899a37b/export</guid>
      <pubDate>Sat, 19 Sep 2026 04:07:25 +0000</pubDate>
    </item>
    <item>
      <title>5ef33868-e6fd-460c-b7ce-eb9fcdafe028</title>
      <link>https://vulnerability.circl.lu/sighting/5ef33868-e6fd-460c-b7ce-eb9fcdafe028/export</link>
      <description>{"uuid": "5ef33868-e6fd-460c-b7ce-eb9fcdafe028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89274", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvtovz5m6n2e", "content": "WP Recipe Maker up to 10.8.1 is vulnerable (CVE-2026-89274, CRITICAL). Attackers can inject malicious shortcodes via approved comments. Update your plugin and review comment moderation settings. https://radar.offseq.com/threat/cve-2026-89274-cwe-94-improper-control-of-generation-of-code-code-inje...", "creation_timestamp": "2026-09-19T03:00:28.656957Z"}</description>
      <content:encoded>{"uuid": "5ef33868-e6fd-460c-b7ce-eb9fcdafe028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89274", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvtovz5m6n2e", "content": "WP Recipe Maker up to 10.8.1 is vulnerable (CVE-2026-89274, CRITICAL). Attackers can inject malicious shortcodes via approved comments. Update your plugin and review comment moderation settings. https://radar.offseq.com/threat/cve-2026-89274-cwe-94-improper-control-of-generation-of-code-code-inje...", "creation_timestamp": "2026-09-19T03:00:28.656957Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5ef33868-e6fd-460c-b7ce-eb9fcdafe028/export</guid>
      <pubDate>Sat, 19 Sep 2026 03:00:28 +0000</pubDate>
    </item>
    <item>
      <title>fdf0e26b-fcb6-46fb-95c4-45ff172420f5</title>
      <link>https://vulnerability.circl.lu/sighting/fdf0e26b-fcb6-46fb-95c4-45ff172420f5/export</link>
      <description>{"uuid": "fdf0e26b-fcb6-46fb-95c4-45ff172420f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89274", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117295469276201522", "content": "WP Recipe Maker &amp;lt;=10.8.1 hit by CVE-2026-89274: CRITICAL code injection via unsanitized shortcodes in comment ratings. Unauthenticated attackers can trigger arbitrary shortcode execution on recipe pages. Upgrade ASAP. https://radar.offseq.com/threat/cve-2026-89274-cwe-94-improper-control-of-generation-of-code-code-injection-in-brechtvds-wp-recipe-77a2426acb987f3a #OffSeq #WordPress #CVE202689274 #Infosec", "creation_timestamp": "2026-09-19T03:00:24.336980Z"}</description>
      <content:encoded>{"uuid": "fdf0e26b-fcb6-46fb-95c4-45ff172420f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89274", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117295469276201522", "content": "WP Recipe Maker &amp;lt;=10.8.1 hit by CVE-2026-89274: CRITICAL code injection via unsanitized shortcodes in comment ratings. Unauthenticated attackers can trigger arbitrary shortcode execution on recipe pages. Upgrade ASAP. https://radar.offseq.com/threat/cve-2026-89274-cwe-94-improper-control-of-generation-of-code-code-injection-in-brechtvds-wp-recipe-77a2426acb987f3a #OffSeq #WordPress #CVE202689274 #Infosec", "creation_timestamp": "2026-09-19T03:00:24.336980Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fdf0e26b-fcb6-46fb-95c4-45ff172420f5/export</guid>
      <pubDate>Sat, 19 Sep 2026 03:00:24 +0000</pubDate>
    </item>
  </channel>
</rss>
