https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:00:24.507857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366727 EUVD-2026-366727 2026-10-06T19:00:24.552989+00:00 EUVD-2026-366727 https://cve.radiocsirt.org/vuln/fkie_cve-2026-74925 fkie_cve-2026-74925 2026-10-06T19:00:24.553024+00:00

The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to grant that role administrator-level capabilities and take over the site.

 https://cve.radiocsirt.org/vuln/ghsa-w9pm-mr7j-6qjf GHSA-w9pm-mr7j-6qjf 2026-10-06T19:00:24.553055+00:00

The MultiVendorX WordPress plugin before 5.0.16 does not restrict who can update its role and capability settings, allowing users holding its vendor role to grant that role administrator-level capabilities and take over the site.