https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:41:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-54338 cnvd-2022-54338 https://cve.radiocsirt.org/vuln/cnvd-2022-54338 https://cve.radiocsirt.org/vuln/euvd-2026-12053 EUVD-2026-12053 https://cve.radiocsirt.org/vuln/euvd-2026-12053 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1903 <p>The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username</p> <p>The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1903 https://cve.radiocsirt.org/vuln/ghsa-84p8-fx26-f9cw <p>The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username</p> <p>The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username</p> https://cve.radiocsirt.org/vuln/ghsa-84p8-fx26-f9cw https://cve.radiocsirt.org/vuln/gsd-2022-1903 gsd-2022-1903 https://cve.radiocsirt.org/vuln/gsd-2022-1903