https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:36:10.135427+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318406 EUVD-2026-318406 2026-10-06T22:36:10.183490+00:00 EUVD-2026-318406 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6206 fkie_cve-2026-6206 2026-10-06T22:36:10.183538+00:00

The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the _get_post_property_from_querystring() function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.

 https://cve.radiocsirt.org/vuln/ghsa-ppgv-g9ww-9w9w GHSA-ppgv-g9ww-9w9w 2026-10-06T22:36:10.183571+00:00

The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the _get_post_property_from_querystring() function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to.