Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:22:04 +0000 cnvd-2022-31856 https://cve.radiocsirt.org/vuln/cnvd-2022-31856 cnvd-2022-31856 https://cve.radiocsirt.org/vuln/cnvd-2022-31856 EUVD-2026-11263 https://cve.radiocsirt.org/vuln/euvd-2026-11263 EUVD-2026-11263 https://cve.radiocsirt.org/vuln/euvd-2026-11263 fkie_cve-2022-0837 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0837 <p>The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS notification as well as retrieve sensitive information about the admin, such as the email, account balance and payment history. A malicious actor can abuse this vulnerability to drain out the account balance by keep sending SMS notification.</p> <p>The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS notification as well as retrieve sensitive information about the admin, such as the email, account balance and payment history. A malicious actor can abuse this vulnerability to drain out the account balance by keep sending SMS notification.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0837 GHSA-q554-r63m-vh57 https://cve.radiocsirt.org/vuln/ghsa-q554-r63m-vh57 <p>The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS notification as well as retrieve sensitive information about the admin, such as the email, account balance and payment history. A malicious actor can abuse this vulnerability to drain out the account balance by keep sending SMS notification.</p> <p>The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS notification as well as retrieve sensitive information about the admin, such as the email, account balance and payment history. A malicious actor can abuse this vulnerability to drain out the account balance by keep sending SMS notification.</p> https://cve.radiocsirt.org/vuln/ghsa-q554-r63m-vh57 gsd-2022-0837 https://cve.radiocsirt.org/vuln/gsd-2022-0837 gsd-2022-0837 https://cve.radiocsirt.org/vuln/gsd-2022-0837