https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T21:39:50.607239+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285641 EUVD-2026-285641 2026-10-09T21:39:50.662871+00:00 EUVD-2026-285641 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10578 fkie_cve-2024-10578 2026-10-09T21:39:50.662916+00:00

The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnews_importer_plugin_action_for_notice() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins that can be leveraged to exploit other vulnerabilities.

 https://cve.radiocsirt.org/vuln/ghsa-58gh-9h4v-fw96 GHSA-58gh-9h4v-fw96 2026-10-09T21:39:50.662965+00:00

The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnews_importer_plugin_action_for_notice() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins that can be leveraged to exploit other vulnerabilities.