https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T20:00:54.735945+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6591 CVE-2024-6591 — Ultimate WordPress Auction Plugin <= 4.2.7 - Missing Authorization to Unauthenticated Email Creation 2026-10-18T20:00:54.737226+00:00

Affected: nitesh_singh Ultimate WordPress Auction Plugin, nitesh_singh ultimate_wordpress_auction_plugin

The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized email creation and sending due to a missing capability check on the 'send_auction_email_callback' and 'resend_auction_email_callback' functions in all versions up to, and including, 4.2.7. This makes it possible for unauthenticated attackers to craft emails that include links and send to any email address.