https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 17:36:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207762 EUVD-2026-207762 https://cve.radiocsirt.org/vuln/euvd-2026-207762 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4362 <p>The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() function called via the kiwi_social_share_get_option AJAX action in version 2.1.0. This makes it possible for unauthenticated attackers to read and modify arbitrary options on a WordPress site that can be used for complete site takeover. This was a previously fixed vulnerability that was reintroduced in this version.</p> <p>The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() function called via the kiwi_social_share_get_option AJAX action in version 2.1.0. This makes it possible for unauthenticated attackers to read and modify arbitrary options on a WordPress site that can be used for complete site takeover. This was a previously fixed vulnerability that was reintroduced in this version.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-4362 https://cve.radiocsirt.org/vuln/ghsa-v95r-22v9-3fc7 <p>The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() function called via the kiwi_social_share_get_option AJAX action in version 2.1.0. This makes it possible for unauthenticated attackers to read and modify arbitrary options on a WordPress site that can be used for complete site takeover. This was a previously fixed vulnerability that was reintroduced in this version.</p> <p>The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() function called via the kiwi_social_share_get_option AJAX action in version 2.1.0. This makes it possible for unauthenticated attackers to read and modify arbitrary options on a WordPress site that can be used for complete site takeover. This was a previously fixed vulnerability that was reintroduced in this version.</p> https://cve.radiocsirt.org/vuln/ghsa-v95r-22v9-3fc7 https://cve.radiocsirt.org/vuln/gsd-2021-4362 gsd-2021-4362 https://cve.radiocsirt.org/vuln/gsd-2021-4362