https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T16:29:03.305381+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286116 EUVD-2026-286116 2026-10-21T16:29:03.308359+00:00 EUVD-2026-286116 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25142 fkie_cve-2019-25142 2026-10-21T16:29:03.308414+00:00

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). This is due to 'companion_disable_popup' function only checking the nonce while sending user input to the 'update_option' function. This makes it possible for authenticated attackers to change otherwise restricted options.

 https://cve.radiocsirt.org/vuln/ghsa-w4h9-w7jf-x53v GHSA-w4h9-w7jf-x53v 2026-10-21T16:29:03.308482+00:00

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). This is due to 'companion_disable_popup' function only checking the nonce while sending user input to the 'update_option' function. This makes it possible for authenticated attackers to change otherwise restricted options.

 https://cve.radiocsirt.org/vuln/gsd-2019-25142 gsd-2019-25142 2026-10-21T16:29:03.308519+00:00 gsd-2019-25142