https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T15:06:46.526273+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282710 EUVD-2026-282710 2026-10-16T15:06:46.570827+00:00 EUVD-2026-282710 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0684 fkie_cve-2026-0684 2026-10-16T15:06:46.570864+00:00

The CP Image Store with Slideshow plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9 due to a logic error in the 'cpis_admin_init' function's permission check. This makes it possible for authenticated attackers, with Contributor-level access and above, to import arbitrary products via XML, if the XML file has already been uploaded to the server.

 https://cve.radiocsirt.org/vuln/ghsa-f7gr-qgv6-m73r GHSA-f7gr-qgv6-m73r 2026-10-16T15:06:46.570898+00:00

The CP Image Store with Slideshow plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9 due to a logic error in the 'cpis_admin_init' function's permission check. This makes it possible for authenticated attackers, with Contributor-level access and above, to import arbitrary products via XML, if the XML file has already been uploaded to the server.