https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:21:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-289205 EUVD-2026-289205 https://cve.radiocsirt.org/vuln/euvd-2026-289205 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4380 <p>The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the &#39;wp_pinterest_automatic_parse_request&#39; function and the &#39;process_form.php&#39; script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to update arbitrary options on a site that can be used to create new administrative user accounts or redirect unsuspecting site visitors.</p> <p>The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the &#39;wp_pinterest_automatic_parse_request&#39; function and the &#39;process_form.php&#39; script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to update arbitrary options on a site that can be used to create new administrative user accounts or redirect unsuspecting site visitors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-4380 https://cve.radiocsirt.org/vuln/ghsa-mmhw-42fh-v6gr <p>The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the &#39;wp_pinterest_automatic_parse_request&#39; function and the &#39;process_form.php&#39; script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to update arbitrary options on a site that can be used to create new administrative user accounts or redirect unsuspecting site visitors.</p> <p>The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the &#39;wp_pinterest_automatic_parse_request&#39; function and the &#39;process_form.php&#39; script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to update arbitrary options on a site that can be used to create new administrative user accounts or redirect unsuspecting site visitors.</p> https://cve.radiocsirt.org/vuln/ghsa-mmhw-42fh-v6gr https://cve.radiocsirt.org/vuln/gsd-2021-4380 gsd-2021-4380 https://cve.radiocsirt.org/vuln/gsd-2021-4380