https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T11:54:59.237288+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-261639 EUVD-2026-261639 2026-10-16T11:54:59.286632+00:00 EUVD-2026-261639 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11127 fkie_cve-2025-11127 2026-10-16T11:54:59.286674+00:00

The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing unauthenticated users to retrieve a valid session for arbitrary users by knowing their email address.

 https://cve.radiocsirt.org/vuln/ghsa-9mf8-fwp6-wv6x GHSA-9mf8-fwp6-wv6x 2026-10-16T11:54:59.286708+00:00

The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing unauthenticated users to retrieve a valid session for arbitrary users by knowing their email address.