https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:03:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-288436 EUVD-2026-288436 https://cve.radiocsirt.org/vuln/euvd-2026-288436 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0958 <p>Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.</p> <p>Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0958 https://cve.radiocsirt.org/vuln/ghsa-hpq9-m2jp-4fgr <p>Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.</p> <p>Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-hpq9-m2jp-4fgr https://cve.radiocsirt.org/vuln/gsd-2023-0958 gsd-2023-0958 https://cve.radiocsirt.org/vuln/gsd-2023-0958