https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:15:36.402507+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-289690 EUVD-2026-289690 2026-10-06T02:15:36.455115+00:00 EUVD-2026-289690 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8121 fkie_cve-2024-8121 2026-10-06T02:15:36.455157+00:00

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an admin's username to a username of their liking as long as the default 'admin' was used.

 https://cve.radiocsirt.org/vuln/ghsa-9299-82cr-w458 GHSA-9299-82cr-w458 2026-10-06T02:15:36.455208+00:00

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an admin's username to a username of their liking as long as the default 'admin' was used.