<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-20T17:19:05.993272+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/28859cef-c597-4a29-8cab-ea8537f0ea26/export</id>
    <title>28859cef-c597-4a29-8cab-ea8537f0ea26</title>
    <updated>2026-05-20T17:19:06.250371+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "28859cef-c597-4a29-8cab-ea8537f0ea26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-44585", "type": "seen", "source": "https://t.me/cibsecurity/57429", "content": "\u203c CVE-2022-44585 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Magneticlab S\u00c3\u00a0rl Homepage Pop-up plugin &amp;lt;= 1.2.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:22.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/28859cef-c597-4a29-8cab-ea8537f0ea26/export"/>
    <published>2023-02-03T00:15:22+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/2b3c4e4a-ea36-40d1-a2ac-838d008d7f2f/export</id>
    <title>2b3c4e4a-ea36-40d1-a2ac-838d008d7f2f</title>
    <updated>2026-05-20T17:19:06.250318+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "2b3c4e4a-ea36-40d1-a2ac-838d008d7f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-44580", "type": "seen", "source": "https://t.me/cibsecurity/60056", "content": "\u203c CVE-2022-44580 \u203c\n\nSQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin &amp;lt;= 2.2.3 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T17:24:55.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/2b3c4e4a-ea36-40d1-a2ac-838d008d7f2f/export"/>
    <published>2023-03-15T17:24:55+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/31d4202b-0a32-450e-922c-20e0eb8b34d2/export</id>
    <title>31d4202b-0a32-450e-922c-20e0eb8b34d2</title>
    <updated>2026-05-20T17:19:06.250245+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "31d4202b-0a32-450e-922c-20e0eb8b34d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-44582", "type": "seen", "source": "https://t.me/cibsecurity/62666", "content": "\u203c CVE-2022-44582 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apptivo Apptivo Business Site CRM plugin &amp;lt;=\u00c2\u00a03.0.12 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-23T12:33:17.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/31d4202b-0a32-450e-922c-20e0eb8b34d2/export"/>
    <published>2023-04-23T12:33:17+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/e75717b1-f53e-46e4-bc69-b15d6d69e1bf/export</id>
    <title>e75717b1-f53e-46e4-bc69-b15d6d69e1bf</title>
    <updated>2026-05-20T17:19:06.250192+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "e75717b1-f53e-46e4-bc69-b15d6d69e1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-44589", "type": "seen", "source": "https://t.me/ctinow/160423", "content": "https://ift.tt/rl0IbSE\nCVE-2022-44589", "creation_timestamp": "2023-12-29T11:26:18.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/e75717b1-f53e-46e4-bc69-b15d6d69e1bf/export"/>
    <published>2023-12-29T11:26:18+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/dcb2db6e-240a-446a-be82-df2e5b3e3e01/export</id>
    <title>dcb2db6e-240a-446a-be82-df2e5b3e3e01</title>
    <updated>2026-05-20T17:19:06.250127+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "dcb2db6e-240a-446a-be82-df2e5b3e3e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-44589", "type": "seen", "source": "https://t.me/cibsecurity/73921", "content": "\u203c\ufe0fCVE-2022-44589\u203c\ufe0f\n\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator  WordPress Two Factor Authentication  2FA , Two Factor, OTP SMS and Email  Passwordless login.This issue affects miniOrange's Google Authenticator  WordPress Two Factor Authentication  2FA , Two Factor, OTP SMS and Email  Passwordless login from na through 5.6.1.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-30T01:36:20.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/dcb2db6e-240a-446a-be82-df2e5b3e3e01/export"/>
    <published>2023-12-30T01:36:20+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/ee4f9c78-75de-481d-b6af-63b025415878/export</id>
    <title>ee4f9c78-75de-481d-b6af-63b025415878</title>
    <updated>2026-05-20T17:19:06.250049+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "ee4f9c78-75de-481d-b6af-63b025415878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-44589", "type": "seen", "source": "https://t.me/arpsyndicate/2281", "content": "#ExploitObserverAlert\n\nCVE-2022-44589\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2022-44589. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator \u2013 WordPress Two Factor Authentication \u2013 2FA , Two Factor, OTP SMS and Email | Passwordless login.This issue affects miniOrange's Google Authenticator \u2013 WordPress Two Factor Authentication \u2013 2FA , Two Factor, OTP SMS and Email | Passwordless login: from n/a through 5.6.1.", "creation_timestamp": "2023-12-31T02:51:10.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/ee4f9c78-75de-481d-b6af-63b025415878/export"/>
    <published>2023-12-31T02:51:10+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/d564cb90-4ccf-4f85-9dfa-1ec181d085de/export</id>
    <title>d564cb90-4ccf-4f85-9dfa-1ec181d085de</title>
    <updated>2026-05-20T17:19:06.249987+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "d564cb90-4ccf-4f85-9dfa-1ec181d085de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-44589", "type": "seen", "source": "https://t.me/ctinow/170800", "content": "https://ift.tt/cbhONoq\nCVE-2022-44589 | miniOrange Google Authenticator Plugin up to 5.6.1 on WordPress information disclosure", "creation_timestamp": "2024-01-21T10:41:38.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/d564cb90-4ccf-4f85-9dfa-1ec181d085de/export"/>
    <published>2024-01-21T10:41:38+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/3a59bf1b-c42a-496a-b134-284954c26052/export</id>
    <title>3a59bf1b-c42a-496a-b134-284954c26052</title>
    <updated>2026-05-20T17:19:06.249907+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "3a59bf1b-c42a-496a-b134-284954c26052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4458", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4458\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The amr shortcode any widget WordPress plugin through 4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-02-13T14:32:11.163Z\n\ud83d\udccf Modified: 2025-03-21T15:45:02.123Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c85ceab3-7e79-402d-ad48-a028f1ee070c", "creation_timestamp": "2025-03-21T16:19:32.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/3a59bf1b-c42a-496a-b134-284954c26052/export"/>
    <published>2025-03-21T16:19:32+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/e235d528-3556-429b-bf7b-59a0886565cc/export</id>
    <title>e235d528-3556-429b-bf7b-59a0886565cc</title>
    <updated>2026-05-20T17:19:06.249367+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "e235d528-3556-429b-bf7b-59a0886565cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-44588", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-44588.yaml", "content": "", "creation_timestamp": "2026-02-21T18:54:48.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/e235d528-3556-429b-bf7b-59a0886565cc/export"/>
    <published>2026-02-21T18:54:48+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/13609c50-a0c3-4ce0-b1fc-666f91f40d0a/export</id>
    <title>13609c50-a0c3-4ce0-b1fc-666f91f40d0a</title>
    <updated>2026-05-20T17:19:06.247030+00:00</updated>
    <author>
      <name>sync_user</name>
      <uri>http://db.gcve.eu/user/sync_user</uri>
    </author>
    <content>{"uuid": "13609c50-a0c3-4ce0-b1fc-666f91f40d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2022-44588", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfpld7sajp2h", "content": "", "creation_timestamp": "2026-02-25T21:02:30.028887Z"}</content>
    <link href="https://db.gcve.eu/sighting/13609c50-a0c3-4ce0-b1fc-666f91f40d0a/export"/>
    <published>2026-02-25T21:02:30.028887+00:00</published>
  </entry>
</feed>
