https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T22:06:36.999903+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-18943 CVE-2026-18943 — WPC Admin Columns < 2.3.4 - Subscriber+ Arbitrary User/Post/Term Meta Disclosure 2026-10-16T22:06:37.016070+00:00

Affected: Unknown WPC Admin Columns

The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to administrators.