Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:59:37 +0000 cnvd-2026-13238 https://cve.radiocsirt.org/vuln/cnvd-2026-13238 cnvd-2026-13238 https://cve.radiocsirt.org/vuln/cnvd-2026-13238 EUVD-2026-289241 https://cve.radiocsirt.org/vuln/euvd-2026-289241 EUVD-2026-289241 https://cve.radiocsirt.org/vuln/euvd-2026-289241 fkie_cve-2025-12192 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12192 <p>The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9. The sysinfo REST endpoint compares the provided key to the stored opt-in key using a loose comparison, allowing unauthenticated attackers to send a boolean value and obtain the full system report whenever &#34;Yes, automatically share my system information with The Events Calendar support team&#34; setting is enabled.</p> <p>The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9. The sysinfo REST endpoint compares the provided key to the stored opt-in key using a loose comparison, allowing unauthenticated attackers to send a boolean value and obtain the full system report whenever &#34;Yes, automatically share my system information with The Events Calendar support team&#34; setting is enabled.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12192 GHSA-7r77-r49w-qf55 https://cve.radiocsirt.org/vuln/ghsa-7r77-r49w-qf55 <p>The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9. The sysinfo REST endpoint compares the provided key to the stored opt-in key using a loose comparison, allowing unauthenticated attackers to send a boolean value and obtain the full system report whenever &#34;Yes, automatically share my system information with The Events Calendar support team&#34; setting is enabled.</p> <p>The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9. The sysinfo REST endpoint compares the provided key to the stored opt-in key using a loose comparison, allowing unauthenticated attackers to send a boolean value and obtain the full system report whenever &#34;Yes, automatically share my system information with The Events Calendar support team&#34; setting is enabled.</p> https://cve.radiocsirt.org/vuln/ghsa-7r77-r49w-qf55