https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T14:35:10.718352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278674 EUVD-2026-278674 2026-10-05T14:35:10.777639+00:00 EUVD-2026-278674 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9544 fkie_cve-2025-9544 2026-10-05T14:35:10.777679+00:00

The Doppler Forms WordPress plugin through 2.5.1 registers an AJAX action install_extension without verifying user capabilities or using a nonce. As a result, any authenticated user — including those with the Subscriber role — can install and activate additional Doppler Forms WordPress plugin through 2.5.1 (limited to those whitelisted by the main Doppler Forms WordPress plugin through 2.5.1).

 https://cve.radiocsirt.org/vuln/ghsa-f6mm-28jx-rrww GHSA-f6mm-28jx-rrww 2026-10-05T14:35:10.777715+00:00

The Doppler Forms WordPress plugin through 2.5.1 registers an AJAX action install_extension without verifying user capabilities or using a nonce. As a result, any authenticated user — including those with the Subscriber role — can install and activate additional Doppler Forms WordPress plugin through 2.5.1 (limited to those whitelisted by the main Doppler Forms WordPress plugin through 2.5.1).