https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:07:54.747538+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285059 EUVD-2026-285059 2026-10-07T10:07:54.797516+00:00 EUVD-2026-285059 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13420 fkie_cve-2024-13420 2026-10-07T10:07:54.797554+00:00

Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on several AJAX actions like 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' and more in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset and modify some of the plugin/theme settings. This issue was escalated to Envato over two months from the date of this disclosure and the issues, while partially patched, are still vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-98r7-98px-p4mx GHSA-98r7-98px-p4mx 2026-10-07T10:07:54.797590+00:00

Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on several AJAX actions like 'gsf_reset_section_options', 'gsf_reset_section_options', 'gsf_create_preset_options' and more in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset and modify some of the plugin/theme settings. This issue was escalated to Envato over two months from the date of this disclosure and the issues, while partially patched, are still vulnerable.