Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 14:05:43 +0000 EUVD-2026-286813 https://cve.radiocsirt.org/vuln/euvd-2026-286813 EUVD-2026-286813 https://cve.radiocsirt.org/vuln/euvd-2026-286813 fkie_cve-2024-10548 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10548 <p>The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.15 via the Project Task List (&#39;/wp-json/pm/v2/projects/1/task-lists&#39;) REST API endpoint. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including the hashed passwords of project owners (e.g. adminstrators).</p> <p>The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.15 via the Project Task List (&#39;/wp-json/pm/v2/projects/1/task-lists&#39;) REST API endpoint. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including the hashed passwords of project owners (e.g. adminstrators).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10548 GHSA-c6cm-8p8j-4fm3 https://cve.radiocsirt.org/vuln/ghsa-c6cm-8p8j-4fm3 <p>The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.15 via the Project Task List (&#39;/wp-json/pm/v2/projects/1/task-lists&#39;) REST API endpoint. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including the hashed passwords of project owners (e.g. adminstrators).</p> <p>The WP Project Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.15 via the Project Task List (&#39;/wp-json/pm/v2/projects/1/task-lists&#39;) REST API endpoint. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including the hashed passwords of project owners (e.g. adminstrators).</p> https://cve.radiocsirt.org/vuln/ghsa-c6cm-8p8j-4fm3