https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:35:18.644390+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-16070 CVE-2026-16070 — Brizy - Page Builder < 2.8.19 - Contributor+ Template Type Update via IDOR 2026-10-08T11:35:18.645566+00:00

Affected: Unknown Brizy

The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta, validating a request parameter that is different from the one used in the write operation, allowing users with Contributor-level access and above to change the template-type assignment of templates owned by other users.