https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T17:35:40.064049+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-3366 CVE-2022-3366 — PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection 2026-10-10T17:35:40.065206+00:00

Affected: Unknown PublishPress Capabilities – User Role Access, Editor Permissions, Admin Menus, Unknown PublishPress Capabilities Pro

The PublishPress Capabilities WordPress plugin before 2.5.2, PublishPress Capabilities Pro WordPress plugin before 2.5.2 unserializes the content of imported files, which could lead to PHP object injection attacks by administrators, on multisite WordPress configurations. Successful exploitation in this case requires other plugins with a suitable gadget chain to be present on the site.