https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:50:41.916601+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286423 EUVD-2026-286423 2026-10-08T03:50:41.920532+00:00 EUVD-2026-286423 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8999 fkie_cve-2025-8999 2026-10-08T03:50:41.920571+00:00

The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activate_modules' function in all versions up to, and including, 2.56. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate or deactivate various theme modules.

 https://cve.radiocsirt.org/vuln/ghsa-8p5x-g3gq-fwxp GHSA-8p5x-g3gq-fwxp 2026-10-08T03:50:41.920606+00:00

The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activate_modules' function in all versions up to, and including, 2.56. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate or deactivate various theme modules.