https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T20:04:47.748656+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282678 EUVD-2026-282678 2026-10-15T20:04:47.795222+00:00 EUVD-2026-282678 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7380 fkie_cve-2024-7380 2026-10-15T20:04:47.795259+00:00

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajax__geolocate_menu and ajax__geolocate_remove_menu functions in all versions up to, and including, 8.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create or delete WordPress menus.

 https://cve.radiocsirt.org/vuln/ghsa-hffc-gcjh-mj4f GHSA-hffc-gcjh-mj4f 2026-10-15T20:04:47.795298+00:00

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajax__geolocate_menu and ajax__geolocate_remove_menu functions in all versions up to, and including, 8.6.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create or delete WordPress menus.