https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T07:37:28.203083+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-1508 CVE-2025-1508 — WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download 2026-10-20T07:37:28.204827+00:00

Affected: themeum WP Crowdfunding

The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the download_data action in all versions up to, and including, 2.1.14. This makes it possible for authenticated attackers, with subscriber-level access and above, to download all of a site's post content when WooCommerce is installed.