https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:08:30.653019+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-10303 CVE-2025-10303 — Library Management System <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation 2026-10-07T15:08:30.668911+00:00

Affected: owthub Library Management System

The Library Management System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the owt7_library_management_ajax_handler() function in all versions up to, and including, 3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and manipulate several of the plugin's settings and features.