https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:35:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-200383 EUVD-2026-200383 https://cve.radiocsirt.org/vuln/euvd-2026-200383 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1597 <p>The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves as an admin of the blog.</p> <p>The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves as an admin of the blog.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1597 https://cve.radiocsirt.org/vuln/ghsa-32v6-f8xf-f75q <p>The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves as an admin of the blog.</p> <p>The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves as an admin of the blog.</p> https://cve.radiocsirt.org/vuln/ghsa-32v6-f8xf-f75q https://cve.radiocsirt.org/vuln/gsd-2023-1597 gsd-2023-1597 https://cve.radiocsirt.org/vuln/gsd-2023-1597