https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T23:07:53.687234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287368 EUVD-2026-287368 2026-10-23T23:07:53.691419+00:00 EUVD-2026-287368 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1981 fkie_cve-2026-1981 2026-10-23T23:07:53.691456+00:00

The HUMN-1 AI Website Scanner & Human Certification by Winston AI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the winston_disconnect() function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's API connection settings via the 'winston_disconnect' AJAX action.

 https://cve.radiocsirt.org/vuln/ghsa-fjwr-wg9v-64cv GHSA-fjwr-wg9v-64cv 2026-10-23T23:07:53.691503+00:00

The HUMN-1 AI Website Scanner & Human Certification by Winston AI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the winston_disconnect() function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's API connection settings via the 'winston_disconnect' AJAX action.