https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:44:39.221152+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319746 EUVD-2026-319746 2026-10-12T22:44:39.223189+00:00 EUVD-2026-319746 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7385 fkie_cve-2026-7385 2026-10-12T22:44:39.223217+00:00

The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses.

 https://cve.radiocsirt.org/vuln/ghsa-77v2-rrqg-jjqc GHSA-77v2-rrqg-jjqc 2026-10-12T22:44:39.223245+00:00

The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attackers to enumerate registered user email addresses.