https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:46:26.051986+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-53738 CVE-2026-53738 — Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling Handler 2026-10-07T20:46:26.069967+00:00

Affected: Inisev Copy & Delete Posts

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.