https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T18:17:01.015397+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285825 EUVD-2026-285825 2026-10-21T18:17:03.775508+00:00 EUVD-2026-285825 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14367 fkie_cve-2025-14367 2026-10-21T18:17:03.775551+00:00

The Easy Theme Options plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0. This is due to missing authorization checks in the eto_import_settings function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import arbitrary plugin settings via the 'eto_import_settings' parameter.

 https://cve.radiocsirt.org/vuln/ghsa-p9qr-rf97-2vhp GHSA-p9qr-rf97-2vhp 2026-10-21T18:17:03.775589+00:00

The Easy Theme Options plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0. This is due to missing authorization checks in the eto_import_settings function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import arbitrary plugin settings via the 'eto_import_settings' parameter.