https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:28:00.379771+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-213760 EUVD-2026-213760 2026-10-03T10:28:00.382754+00:00 EUVD-2026-213760 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4600 fkie_cve-2023-4600 2026-10-03T10:28:00.382790+00:00

The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in versions up to, and including, 2.14.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to activate arbitrary plugins.

 https://cve.radiocsirt.org/vuln/ghsa-jq25-pgm7-4vh9 GHSA-jq25-pgm7-4vh9 2026-10-03T10:28:00.382852+00:00

The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in versions up to, and including, 2.14.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to activate arbitrary plugins.

 https://cve.radiocsirt.org/vuln/gsd-2023-4600 gsd-2023-4600 2026-10-03T10:28:00.382904+00:00 gsd-2023-4600