https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:49:32 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-70742 cnvd-2021-70742 https://cve.radiocsirt.org/vuln/cnvd-2021-70742 https://cve.radiocsirt.org/vuln/euvd-2026-237155 EUVD-2026-237155 https://cve.radiocsirt.org/vuln/euvd-2026-237155 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38312 <p>The Gutenberg Template Library &amp; Redux Framework plugin &lt;= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php”. The `permissions_callback` used in this file only checked for the `edit_posts` capability which is granted to lower-privileged users such as contributors, allowing such users to install arbitrary plugins from the WordPress repository and edit arbitrary posts.</p> <p>The Gutenberg Template Library &amp; Redux Framework plugin &lt;= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php”. The `permissions_callback` used in this file only checked for the `edit_posts` capability which is granted to lower-privileged users such as contributors, allowing such users to install arbitrary plugins from the WordPress repository and edit arbitrary posts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-38312 https://cve.radiocsirt.org/vuln/ghsa-jgqj-hr6f-2p53 <p>The Gutenberg Template Library &amp; Redux Framework plugin &lt;= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php”. The `permissions_callback` used in this file only checked for the `edit_posts` capability which is granted to lower-privileged users such as contributors, allowing such users to install arbitrary plugins from the WordPress repository and edit arbitrary posts.</p> <p>The Gutenberg Template Library &amp; Redux Framework plugin &lt;= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php”. The `permissions_callback` used in this file only checked for the `edit_posts` capability which is granted to lower-privileged users such as contributors, allowing such users to install arbitrary plugins from the WordPress repository and edit arbitrary posts.</p> https://cve.radiocsirt.org/vuln/ghsa-jgqj-hr6f-2p53 https://cve.radiocsirt.org/vuln/gsd-2021-38312 gsd-2021-38312 https://cve.radiocsirt.org/vuln/gsd-2021-38312