https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:04:22.910265+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365725 EUVD-2026-365725 2026-10-07T05:04:22.954788+00:00 EUVD-2026-365725 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84222 fkie_cve-2026-84222 2026-10-07T05:04:22.954829+00:00

The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated users to retrieve the content of pages that are not publicly available, such as private, draft, pending and trashed ones.

 https://cve.radiocsirt.org/vuln/ghsa-9jj4-qrcw-j6vx GHSA-9jj4-qrcw-j6vx 2026-10-07T05:04:22.954863+00:00

The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated users to retrieve the content of pages that are not publicly available, such as private, draft, pending and trashed ones.