https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T03:29:22.949789+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-275426 EUVD-2026-275426 2026-10-06T03:29:22.998773+00:00 EUVD-2026-275426 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1867 fkie_cve-2026-1867 2026-10-06T03:29:22.998815+00:00

The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6's settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator's email address.

 https://cve.radiocsirt.org/vuln/ghsa-w8vw-4787-pf8f GHSA-w8vw-4787-pf8f 2026-10-06T03:29:22.998852+00:00

The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6's settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator's email address.