https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:39:10.982205+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348637 EUVD-2026-348637 2026-10-07T17:39:11.031489+00:00 EUVD-2026-348637 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16968 fkie_cve-2026-16968 2026-10-07T17:39:11.031535+00:00

The GeoDirectory WordPress plugin before 2.8.168 does not restrict a user-search handler to users allowed to list users, allowing any authenticated user with Contributor-level access or higher to retrieve the email addresses of all registered users, including administrators.

 https://cve.radiocsirt.org/vuln/ghsa-826p-m5jc-6mc3 GHSA-826p-m5jc-6mc3 2026-10-07T17:39:11.031571+00:00

The GeoDirectory WordPress plugin before 2.8.168 does not restrict a user-search handler to users allowed to list users, allowing any authenticated user with Contributor-level access or higher to retrieve the email addresses of all registered users, including administrators.