https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T21:59:51.725161+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338905 EUVD-2026-338905 2026-10-12T21:59:51.728552+00:00 EUVD-2026-338905 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12723 fkie_cve-2026-12723 2026-10-12T21:59:51.728584+00:00

The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrary existing comments and to create pre-approved comments under a spoofed identity, bypassing comment moderation.

 https://cve.radiocsirt.org/vuln/ghsa-f5q9-9w7q-q2jv GHSA-f5q9-9w7q-q2jv 2026-10-12T21:59:51.728632+00:00

The Kirki WordPress plugin before 6.0.12 does not perform any authorisation check on one of its REST routes, allowing unauthenticated users to overwrite the content of arbitrary existing comments and to create pre-approved comments under a spoofed identity, bypassing comment moderation.