https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:59:39.834952+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366723 EUVD-2026-366723 2026-10-05T21:59:39.882332+00:00 EUVD-2026-366723 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86779 fkie_cve-2026-86779 2026-10-05T21:59:39.882374+00:00

The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verification, allowing users with the Contributor role and above to permanently delete any chart on the site, including charts created by other users such as administrators.

 https://cve.radiocsirt.org/vuln/ghsa-p8f8-hfx5-63r6 GHSA-p8f8-hfx5-63r6 2026-10-05T21:59:39.882420+00:00

The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verification, allowing users with the Contributor role and above to permanently delete any chart on the site, including charts created by other users such as administrators.