https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:21:24.538231+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-1047 CVE-2024-1047 — ThemeIsle SDK <= Various Versions - Missing Authorization 2026-10-06T04:21:24.554354+00:00

Affected: themeisle Menu Icons by ThemeIsle, themeisle Starter Sites & Templates by Neve, themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, themeisle LightStart – Maintenance Mode, Coming Soon and Landing Page Builder, themeisle Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More, themeisle Multiple Page Generator Plugin – MPG, themeisle Visualizer: Tables and Charts Manager for WordPress, Optimole – Optimize Images in Real Time, themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator, optimole Super Page Cache and 2 more

Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated attackers to update options values that allow ThemeIsle to track promotional activities via utm_source.