https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 14:45:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-290062 EUVD-2026-290062 https://cve.radiocsirt.org/vuln/euvd-2026-290062 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4381 <p>The uListing plugin for WordPress is vulnerable to authorization bypass via wp_route due to missing capability checks, and a missing security nonce, in the StmListingSingleLayout::import_new_layout method in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to change any WordPress option in the database.</p> <p>The uListing plugin for WordPress is vulnerable to authorization bypass via wp_route due to missing capability checks, and a missing security nonce, in the StmListingSingleLayout::import_new_layout method in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to change any WordPress option in the database.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-4381 https://cve.radiocsirt.org/vuln/ghsa-g6pv-vrjh-4g5j <p>The uListing plugin for WordPress is vulnerable to authorization bypass via wp_route due to missing capability checks, and a missing security nonce, in the StmListingSingleLayout::import_new_layout method in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to change any WordPress option in the database.</p> <p>The uListing plugin for WordPress is vulnerable to authorization bypass via wp_route due to missing capability checks, and a missing security nonce, in the StmListingSingleLayout::import_new_layout method in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to change any WordPress option in the database.</p> https://cve.radiocsirt.org/vuln/ghsa-g6pv-vrjh-4g5j https://cve.radiocsirt.org/vuln/gsd-2021-4381 gsd-2021-4381 https://cve.radiocsirt.org/vuln/gsd-2021-4381