https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:28:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-286433 EUVD-2026-286433 https://cve.radiocsirt.org/vuln/euvd-2026-286433 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9860 <p>The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss of data due to a missing capability check on the &#39;import_action&#39; and &#39;install_plugin_per_demo&#39; functions in versions up to, and including, 3.3. This makes it possible for authenticated attackers with subscriber-level permissions or above, to delete or change plugin settings, import demo data, and install limited plugins.</p> <p>The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss of data due to a missing capability check on the &#39;import_action&#39; and &#39;install_plugin_per_demo&#39; functions in versions up to, and including, 3.3. This makes it possible for authenticated attackers with subscriber-level permissions or above, to delete or change plugin settings, import demo data, and install limited plugins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-9860 https://cve.radiocsirt.org/vuln/ghsa-88pc-crr5-ff4c <p>The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss of data due to a missing capability check on the &#39;import_action&#39; and &#39;install_plugin_per_demo&#39; functions in versions up to, and including, 3.3. This makes it possible for authenticated attackers with subscriber-level permissions or above, to delete or change plugin settings, import demo data, and install limited plugins.</p> <p>The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss of data due to a missing capability check on the &#39;import_action&#39; and &#39;install_plugin_per_demo&#39; functions in versions up to, and including, 3.3. This makes it possible for authenticated attackers with subscriber-level permissions or above, to delete or change plugin settings, import demo data, and install limited plugins.</p> https://cve.radiocsirt.org/vuln/ghsa-88pc-crr5-ff4c