https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:17:13.162859+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-66589 cnvd-2022-66589 2026-10-03T22:17:13.166365+00:00 cnvd-2022-66589 https://cve.radiocsirt.org/vuln/euvd-2026-10945 EUVD-2026-10945 2026-10-03T22:17:13.166402+00:00 EUVD-2026-10945 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0345 fkie_cve-2022-0345 2026-10-03T22:17:13.166416+00:00

The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfw_search_users AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes (finding the first letter, then the second one, then the third one etc.).

 https://cve.radiocsirt.org/vuln/ghsa-9jh8-cc8h-44v2 GHSA-9jh8-cc8h-44v2 2026-10-03T22:17:13.166446+00:00

The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfw_search_users AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes (finding the first letter, then the second one, then the third one etc.).

 https://cve.radiocsirt.org/vuln/gsd-2022-0345 gsd-2022-0345 2026-10-03T22:17:13.166463+00:00 gsd-2022-0345