https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:30:49.562800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-326636 EUVD-2026-326636 2026-10-07T02:30:49.614852+00:00 EUVD-2026-326636 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53738 fkie_cve-2026-53738 2026-10-07T02:30:49.614892+00:00

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.

 https://cve.radiocsirt.org/vuln/ghsa-cx2j-wv5h-5j6v GHSA-cx2j-wv5h-5j6v 2026-10-07T02:30:49.614927+00:00

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.