https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:14:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-289771 EUVD-2026-289771 https://cve.radiocsirt.org/vuln/euvd-2026-289771 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13312 <p>The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the &#39;ntzcrm_add_new_tag&#39; function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to create arbitrary membership tags and modify CRM configuration that should be restricted to administrators.</p> <p>The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the &#39;ntzcrm_add_new_tag&#39; function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to create arbitrary membership tags and modify CRM configuration that should be restricted to administrators.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13312 https://cve.radiocsirt.org/vuln/ghsa-r7px-4869-mhc2 <p>The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the &#39;ntzcrm_add_new_tag&#39; function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to create arbitrary membership tags and modify CRM configuration that should be restricted to administrators.</p> <p>The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the &#39;ntzcrm_add_new_tag&#39; function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to create arbitrary membership tags and modify CRM configuration that should be restricted to administrators.</p> https://cve.radiocsirt.org/vuln/ghsa-r7px-4869-mhc2