https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:48:57.132745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374018 EUVD-2026-374018 2026-10-05T21:48:57.181584+00:00 EUVD-2026-374018 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18364 fkie_cve-2026-18364 2026-10-05T21:48:57.181627+00:00

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals WordPress plugin before 6.4.2's stored integration settings.

 https://cve.radiocsirt.org/vuln/ghsa-xjx7-wqcv-9p5h GHSA-xjx7-wqcv-9p5h 2026-10-05T21:48:57.181662+00:00

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals WordPress plugin before 6.4.2's stored integration settings.