https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:11:39.701076+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-283013 EUVD-2026-283013 2026-10-06T16:11:39.757677+00:00 EUVD-2026-283013 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7836 fkie_cve-2024-7836 2026-10-06T16:11:39.757719+00:00

The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicate_page_ajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate and view private or draft posts created by other users that otherwise shouldn't be accessible to them.

 https://cve.radiocsirt.org/vuln/ghsa-9h55-298f-39qv GHSA-9h55-298f-39qv 2026-10-06T16:11:39.757756+00:00

The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicate_page_ajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate and view private or draft posts created by other users that otherwise shouldn't be accessible to them.