https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:11:46.266183+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348645 EUVD-2026-348645 2026-10-08T03:11:46.269184+00:00 EUVD-2026-348645 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16603 fkie_cve-2026-16603 2026-10-08T03:11:46.269215+00:00

The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to read the full content, title, and excerpt of category-locked posts through the core REST API.

 https://cve.radiocsirt.org/vuln/ghsa-w2h3-gqm7-9j89 GHSA-w2h3-gqm7-9j89 2026-10-08T03:11:46.269245+00:00

The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to read the full content, title, and excerpt of category-locked posts through the core REST API.