https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:45:32.297371+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-373417 EUVD-2026-373417 2026-10-06T06:45:32.345930+00:00 EUVD-2026-373417 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4123 fkie_cve-2026-4123 2026-10-06T06:45:32.345967+00:00

The RW Elephant Rental Inventory plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.3.13. This is due to a missing capability check on the toggle_cache() function which is hooked to the wp_ajax_toggle_cache AJAX action. The function also lacks nonce verification. This makes it possible for authenticated attackers, with Subscriber-level access and above, to toggle the plugin's cache setting on or off by sending a POST request to admin-ajax.

 https://cve.radiocsirt.org/vuln/ghsa-93mx-gf2p-7gff GHSA-93mx-gf2p-7gff 2026-10-06T06:45:32.346002+00:00

The RW Elephant Rental Inventory plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.3.13. This is due to a missing capability check on the toggle_cache() function which is hooked to the wp_ajax_toggle_cache AJAX action. The function also lacks nonce verification. This makes it possible for authenticated attackers, with Subscriber-level access and above, to toggle the plugin's cache setting on or off by sending a POST request to admin-ajax.