https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 20:11:21 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-25211 cnvd-2022-25211 https://cve.radiocsirt.org/vuln/cnvd-2022-25211 https://cve.radiocsirt.org/vuln/euvd-2026-24475 EUVD-2026-24475 https://cve.radiocsirt.org/vuln/euvd-2026-24475 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25087 <p>The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).</p> <p>The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25087 https://cve.radiocsirt.org/vuln/ghsa-hc7r-q2m2-f836 <p>The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).</p> <p>The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticated attackers to call them, which could lead to sensitive information disclosure, such as posts passwords (fixed in 3.2.24) and files Master Keys (fixed in 3.2.25).</p> https://cve.radiocsirt.org/vuln/ghsa-hc7r-q2m2-f836 https://cve.radiocsirt.org/vuln/gsd-2021-25087 gsd-2021-25087 https://cve.radiocsirt.org/vuln/gsd-2021-25087