https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 19:36:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-284697 EUVD-2026-284697 https://cve.radiocsirt.org/vuln/euvd-2026-284697 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3249 <p>The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_xml_data, xml_data_import, import_option_data, import_widgets, and import_customizer_settings functions in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to create pages, update certain options, including WooCommerce page titles and Elementor settings, import widgets, and update the plugin&#39;s customizer settings and the WordPress custom CSS. NOTE: This vulnerability was partially fixed in version 1.6.2.</p> <p>The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_xml_data, xml_data_import, import_option_data, import_widgets, and import_customizer_settings functions in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to create pages, update certain options, including WooCommerce page titles and Elementor settings, import widgets, and update the plugin&#39;s customizer settings and the WordPress custom CSS. NOTE: This vulnerability was partially fixed in version 1.6.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3249 https://cve.radiocsirt.org/vuln/ghsa-f75m-4rx3-qhq8 <p>The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_xml_data, xml_data_import, import_option_data, import_widgets, and import_customizer_settings functions in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to create pages, update certain options, including WooCommerce page titles and Elementor settings, import widgets, and update the plugin&#39;s customizer settings and the WordPress custom CSS. NOTE: This vulnerability was partially fixed in version 1.6.2.</p> <p>The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the import_xml_data, xml_data_import, import_option_data, import_widgets, and import_customizer_settings functions in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to create pages, update certain options, including WooCommerce page titles and Elementor settings, import widgets, and update the plugin&#39;s customizer settings and the WordPress custom CSS. NOTE: This vulnerability was partially fixed in version 1.6.2.</p> https://cve.radiocsirt.org/vuln/ghsa-f75m-4rx3-qhq8 https://cve.radiocsirt.org/vuln/gsd-2024-3249 gsd-2024-3249 https://cve.radiocsirt.org/vuln/gsd-2024-3249