https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:23:30.406965+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-344181 EUVD-2026-344181 2026-10-07T22:23:30.463715+00:00 EUVD-2026-344181 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16056 fkie_cve-2026-16056 2026-10-07T22:23:30.463757+00:00

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.

 https://cve.radiocsirt.org/vuln/ghsa-xp5w-q4v3-mxrm GHSA-xp5w-q4v3-mxrm 2026-10-07T22:23:30.463807+00:00

The Contest Gallery WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site's entire stored OpenAI prompt history.