https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:34:59.845247+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-344190 EUVD-2026-344190 2026-10-08T11:34:59.847296+00:00 EUVD-2026-344190 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16276 fkie_cve-2026-16276 2026-10-08T11:34:59.847327+00:00

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers.

 https://cve.radiocsirt.org/vuln/ghsa-jxrw-x44m-c9mq GHSA-jxrw-x44m-c9mq 2026-10-08T11:34:59.847357+00:00

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers.