https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 12:48:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-287076 EUVD-2026-287076 https://cve.radiocsirt.org/vuln/euvd-2026-287076 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36721 <p>The Brilliance &lt;= 1.2.7, Activello &lt;= 1.4.0, and Newspaper X &lt;= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the &#39;activello_activate_plugin&#39; and &#39;activello_deactivate_plugin&#39; functions in the &#39;inc/welcome-screen/class-activello-welcome.php&#39; file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.</p> <p>The Brilliance &lt;= 1.2.7, Activello &lt;= 1.4.0, and Newspaper X &lt;= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the &#39;activello_activate_plugin&#39; and &#39;activello_deactivate_plugin&#39; functions in the &#39;inc/welcome-screen/class-activello-welcome.php&#39; file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-36721 https://cve.radiocsirt.org/vuln/ghsa-x6fw-c968-rf52 <p>The Brilliance &lt;= 1.2.7, Activello &lt;= 1.4.0, and Newspaper X &lt;= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the &#39;activello_activate_plugin&#39; and &#39;activello_deactivate_plugin&#39; functions in the &#39;inc/welcome-screen/class-activello-welcome.php&#39; file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.</p> <p>The Brilliance &lt;= 1.2.7, Activello &lt;= 1.4.0, and Newspaper X &lt;= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the &#39;activello_activate_plugin&#39; and &#39;activello_deactivate_plugin&#39; functions in the &#39;inc/welcome-screen/class-activello-welcome.php&#39; file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.</p> https://cve.radiocsirt.org/vuln/ghsa-x6fw-c968-rf52 https://cve.radiocsirt.org/vuln/gsd-2020-36721 gsd-2020-36721 https://cve.radiocsirt.org/vuln/gsd-2020-36721