https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:40:32.538449+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-0345 CVE-2022-0345 — Better Notifications for WP < 1.8.7 - Email Address Disclosure 2026-10-05T12:40:32.553519+00:00

Affected: Unknown Customize WordPress Emails and Alerts

The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfw_search_users AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes (finding the first letter, then the second one, then the third one etc.).