https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:23:29.594457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288555 EUVD-2026-288555 2026-10-09T14:23:29.597100+00:00 EUVD-2026-288555 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1050 fkie_cve-2024-1050 2026-10-09T14:23:29.597132+00:00

The Import and export users and customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_force_reset_password_delete_metas() function in all versions up to, and including, 1.26.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete all forced password resets. CVE-2024-34815 is a duplicate of this issue.

 https://cve.radiocsirt.org/vuln/ghsa-wf86-w85g-r2f6 GHSA-wf86-w85g-r2f6 2026-10-09T14:23:29.597165+00:00

The Import and export users and customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_force_reset_password_delete_metas() function in all versions up to, and including, 1.26.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete all forced password resets.

 https://cve.radiocsirt.org/vuln/gsd-2024-1050 gsd-2024-1050 2026-10-09T14:23:29.597183+00:00 gsd-2024-1050