https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:11:57.500915+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-16546 CVE-2026-16546 — Wired Impact Volunteer Management < 2.8.2 - Subscriber+ Arbitrary RSVP Removal via wivm_remove_rsvp 2026-10-08T08:11:57.502542+00:00

Affected: Unknown Wired Impact Volunteer Management

The Wired Impact Volunteer Management WordPress plugin before 2.8.2 does not have authorisation checks in one of its AJAX actions, and does not verify that the RSVP being removed belongs to the requesting user, allowing users with a role as low as Subscriber to remove arbitrary users' RSVPs from any volunteer opportunity.