https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T04:04:47.903964+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338264 EUVD-2026-338264 2026-10-13T04:04:47.906090+00:00 EUVD-2026-338264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12907 fkie_cve-2026-12907 2026-10-13T04:04:47.906119+00:00

The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and activate a site-wide template that overrides the header, footer or other global areas displayed to all visitors, which is normally restricted to administrators.

 https://cve.radiocsirt.org/vuln/ghsa-q754-gwx4-mxg2 GHSA-q754-gwx4-mxg2 2026-10-13T04:04:47.906148+00:00

The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and activate a site-wide template that overrides the header, footer or other global areas displayed to all visitors, which is normally restricted to administrators.