https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T03:07:12.225080+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341591 EUVD-2026-341591 2026-10-16T03:07:12.227387+00:00 EUVD-2026-341591 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25738 fkie_cve-2019-25738 2026-10-16T03:07:12.227422+00:00

WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option action. Attackers can send POST requests to the admin-ajax.php endpoint with the action parameter set to hc_ajax_save_option to enable user registration and set the default role to administrator, enabling account takeover.

 https://cve.radiocsirt.org/vuln/ghsa-p9g9-jpx8-w224 GHSA-p9g9-jpx8-w224 2026-10-16T03:07:12.227454+00:00

WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option action. Attackers can send POST requests to the admin-ajax.php endpoint with the action parameter set to hc_ajax_save_option to enable user registration and set the default role to administrator, enabling account takeover.