https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:11:15.469032+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341001 EUVD-2026-341001 2026-10-12T20:11:15.512435+00:00 EUVD-2026-341001 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12689 fkie_cve-2026-12689 2026-10-12T20:11:15.512466+00:00

The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users with Subscriber-level access and above to soft-delete, tamper with the metadata of, and mark as read other users' private message threads.

 https://cve.radiocsirt.org/vuln/ghsa-gv3q-r4q9-h53h GHSA-gv3q-r4q9-h53h 2026-10-12T20:11:15.512498+00:00

The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users with Subscriber-level access and above to soft-delete, tamper with the metadata of, and mark as read other users' private message threads.