https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:17:37.150470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351270 EUVD-2026-351270 2026-10-07T17:17:37.195865+00:00 EUVD-2026-351270 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16298 fkie_cve-2026-16298 2026-10-07T17:17:37.195899+00:00

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.

 https://cve.radiocsirt.org/vuln/ghsa-4w8m-c933-mrf8 GHSA-4w8m-c933-mrf8 2026-10-07T17:17:37.195932+00:00

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.