https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:47:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-289690 EUVD-2026-289690 https://cve.radiocsirt.org/vuln/euvd-2026-289690 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8121 <p>The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an admin&#39;s username to a username of their liking as long as the default &#39;admin&#39; was used.</p> <p>The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an admin&#39;s username to a username of their liking as long as the default &#39;admin&#39; was used.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-8121 https://cve.radiocsirt.org/vuln/ghsa-9299-82cr-w458 <p>The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an admin&#39;s username to a username of their liking as long as the default &#39;admin&#39; was used.</p> <p>The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an admin&#39;s username to a username of their liking as long as the default &#39;admin&#39; was used.</p> https://cve.radiocsirt.org/vuln/ghsa-9299-82cr-w458