https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:28:05.420079+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-236043 EUVD-2026-236043 2026-10-08T19:28:05.422436+00:00 EUVD-2026-236043 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3471 fkie_cve-2025-3471 2026-10-08T19:28:05.422481+00:00

The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the REST API, which could allow Contributor and above roles to perform such action

 https://cve.radiocsirt.org/vuln/ghsa-ppf8-hgp4-7rvj GHSA-ppf8-hgp4-7rvj 2026-10-08T19:28:05.422512+00:00

The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the REST API, which could allow Contributor and above roles to perform such action