https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T09:59:35.934998+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-283756 EUVD-2026-283756 2026-10-17T09:59:35.937438+00:00 EUVD-2026-283756 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2299 fkie_cve-2023-2299 2026-10-17T09:59:35.937468+00:00

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized medication of data via the /wp-json/vcita-wordpress/v1/actions/auth REST-API endpoint in versions up to, and including, 4.4.2 due to a missing capability check on the processAction function. This makes it possible for unauthenticated attackers modify the plugin's settings.

 https://cve.radiocsirt.org/vuln/ghsa-f89h-mvp9-j54m GHSA-f89h-mvp9-j54m 2026-10-17T09:59:35.937498+00:00

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized medication of data via the /wp-json/vcita-wordpress/v1/actions/auth REST-API endpoint in versions up to, and including, 4.2.10 due to a missing capability check on the processAction function. This makes it possible for unauthenticated attackers modify the plugin's settings.

 https://cve.radiocsirt.org/vuln/gsd-2023-2299 gsd-2023-2299 2026-10-17T09:59:35.937516+00:00 gsd-2023-2299