https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:30:53.710904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-284412 EUVD-2026-284412 2026-10-02T20:30:53.713716+00:00 EUVD-2026-284412 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0404 fkie_cve-2023-0404 2026-10-02T20:30:53.713752+00:00

The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions related to AJAX actions in versions up to, and including, 2.3.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those functions intended for administrator use. While the plugin is still pending review from the WordPress repository, site owners can download a copy of the patched version directly from the developer's Github at https://github.com/liedekef/events-made-easy

 https://cve.radiocsirt.org/vuln/ghsa-c3wx-66v4-wf3g GHSA-c3wx-66v4-wf3g 2026-10-02T20:30:53.713789+00:00

The Events Made Easy plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions related to AJAX actions in versions up to, and including, 2.3.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke those functions intended for administrator use. While the plugin is still pending review from the WordPress repository, site owners can download a copy of the patched version directly from the developer's Github at https://github.com/liedekef/events-made-easy

 https://cve.radiocsirt.org/vuln/gsd-2023-0404 gsd-2023-0404 2026-10-02T20:30:53.713809+00:00 gsd-2023-0404