https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T11:23:10.609699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-8430 CVE-2024-8430 — Spice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content Import 2026-10-12T11:23:10.610697+00:00

Affected: spicethemes Spice Starter Sites, spicethemes spice_starter_sites

The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spice_starter_sites_importer_creater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo content.