https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:25:06.257567+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343819 EUVD-2026-343819 2026-10-07T12:25:06.311165+00:00 EUVD-2026-343819 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13389 fkie_cve-2026-13389 2026-10-07T12:25:06.311207+00:00

The webtoffee-cookie-consent WordPress plugin before 3.5.3 does not perform authorization checks on several of its REST API routes, allowing unauthenticated attackers to export and delete stored visitor consent records, create posts, and modify the webtoffee-cookie-consent WordPress plugin before 3.5.3's licensing state.

 https://cve.radiocsirt.org/vuln/ghsa-xw6w-vrqp-fhq4 GHSA-xw6w-vrqp-fhq4 2026-10-07T12:25:06.311256+00:00

The webtoffee-cookie-consent WordPress plugin before 3.5.3 does not perform authorization checks on several of its REST API routes, allowing unauthenticated attackers to export and delete stored visitor consent records, create posts, and modify the webtoffee-cookie-consent WordPress plugin before 3.5.3's licensing state.