https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T10:55:21.126627+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-27063 cnvd-2025-27063 2026-10-19T10:55:21.129301+00:00 cnvd-2025-27063 https://cve.radiocsirt.org/vuln/euvd-2026-285749 EUVD-2026-285749 2026-10-19T10:55:21.129337+00:00 EUVD-2026-285749 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12038 fkie_cve-2025-12038 2026-10-19T10:55:21.129351+00:00

The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the /wp-json/folderly/v1/config/clear-all-data REST API endpoint in all versions up to, and including, 0.3. This makes it possible for authenticated attackers, with Author-level access and above, to clear all data like terms and categories.

 https://cve.radiocsirt.org/vuln/ghsa-25vq-xhx7-64q5 GHSA-25vq-xhx7-64q5 2026-10-19T10:55:21.129383+00:00

The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the /wp-json/folderly/v1/config/clear-all-data REST API endpoint in all versions up to, and including, 0.3. This makes it possible for authenticated attackers, with Author-level access and above, to clear all data like terms and categories.