https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T06:39:40.454343+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285184 EUVD-2026-285184 2026-10-20T06:39:40.456493+00:00 EUVD-2026-285184 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1508 fkie_cve-2025-1508 2026-10-20T06:39:40.456537+00:00

The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the download_data action in all versions up to, and including, 2.1.14. This makes it possible for authenticated attackers, with subscriber-level access and above, to download all of a site's post content when WooCommerce is installed.

 https://cve.radiocsirt.org/vuln/ghsa-q4vj-m25p-6gfj GHSA-q4vj-m25p-6gfj 2026-10-20T06:39:40.456574+00:00

The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the download_data action in all versions up to, and including, 2.1.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to download all of a site's post content when WooCommerce is installed.