https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:43:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-285737 EUVD-2026-285737 https://cve.radiocsirt.org/vuln/euvd-2026-285737 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5411 <p>The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_save_post function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to modify certain post values. Note that the extent of modification is limited due to fixed values passed to the wp_update_post function.</p> <p>The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_save_post function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to modify certain post values. Note that the extent of modification is limited due to fixed values passed to the wp_update_post function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-5411 https://cve.radiocsirt.org/vuln/ghsa-4c25-gwp9-9c2h <p>The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_save_post function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to modify certain post values. Note that the extent of modification is limited due to fixed values passed to the wp_update_post function.</p> <p>The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_save_post function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to modify certain post values. Note that the extent of modification is limited due to fixed values passed to the wp_update_post function.</p> https://cve.radiocsirt.org/vuln/ghsa-4c25-gwp9-9c2h https://cve.radiocsirt.org/vuln/gsd-2023-5411 gsd-2023-5411 https://cve.radiocsirt.org/vuln/gsd-2023-5411