Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:54:15 +0000 EUVD-2026-213968 https://cve.radiocsirt.org/vuln/euvd-2026-213968 EUVD-2026-213968 https://cve.radiocsirt.org/vuln/euvd-2026-213968 fkie_cve-2023-0889 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0889 <p>Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator</p> <p>Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0889 GHSA-vh2f-q9g6-wv38 https://cve.radiocsirt.org/vuln/ghsa-vh2f-q9g6-wv38 <p>Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator</p> <p>Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator</p> https://cve.radiocsirt.org/vuln/ghsa-vh2f-q9g6-wv38 gsd-2023-0889 https://cve.radiocsirt.org/vuln/gsd-2023-0889 gsd-2023-0889 https://cve.radiocsirt.org/vuln/gsd-2023-0889