https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:28:32.867977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-321635 EUVD-2026-321635 2026-10-05T23:28:32.870244+00:00 EUVD-2026-321635 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3279 fkie_cve-2026-3279 2026-10-05T23:28:32.870275+00:00

The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` function in all versions up to, and including, 1.4.1. This is due to the function only verifying a nonce without checking user capabilities. This makes it possible for authenticated attackers, with Subscriber-level access and above, to downgrade the site-wide jQuery version from 3.7.1 to the legacy 1.12.4-wp release, which has knowns security vulnerabilities.

 https://cve.radiocsirt.org/vuln/ghsa-hcmf-56qp-ghh2 GHSA-hcmf-56qp-ghh2 2026-10-05T23:28:32.870309+00:00

The Enable jQuery Migrate Helper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `downgrade_jquery_version()` function in all versions up to, and including, 1.4.1. This is due to the function only verifying a nonce without checking user capabilities. This makes it possible for authenticated attackers, with Subscriber-level access and above, to downgrade the site-wide jQuery version from 3.7.1 to the legacy 1.12.4-wp release, which has knowns security vulnerabilities.