https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T05:03:48.821083+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287578 EUVD-2026-287578 2026-10-10T05:03:48.823980+00:00 EUVD-2026-287578 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10674 fkie_cve-2024-10674 2026-10-10T05:03:48.824012+00:00

The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the th_shop_mania_install_and_activate_callback() function in all versions up to, and including, 1.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins which can be leveraged to exploit other vulnerabilities and achieve remote code execution and privilege escalation.

 https://cve.radiocsirt.org/vuln/ghsa-cq6q-38f7-2p77 GHSA-cq6q-38f7-2p77 2026-10-10T05:03:48.824045+00:00

The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the th_shop_mania_install_and_activate_callback() function in all versions up to, and including, 1.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins which can be leveraged to exploit other vulnerabilities and achieve remote code execution and privilege escalation.