https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:31:24 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-286185 EUVD-2026-286185 https://cve.radiocsirt.org/vuln/euvd-2026-286185 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14864 <p>The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the `vd_get_apikey` function which is hooked to `wp_ajax_virusdie_apikey`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve the site&#39;s Virusdie API key, which could be used to access the site owner&#39;s Virusdie account and potentially compromise site security.</p> <p>The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the `vd_get_apikey` function which is hooked to `wp_ajax_virusdie_apikey`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve the site&#39;s Virusdie API key, which could be used to access the site owner&#39;s Virusdie account and potentially compromise site security.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14864 https://cve.radiocsirt.org/vuln/ghsa-g989-4692-3qw2 <p>The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the `vd_get_apikey` function which is hooked to `wp_ajax_virusdie_apikey`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve the site&#39;s Virusdie API key, which could be used to access the site owner&#39;s Virusdie account and potentially compromise site security.</p> <p>The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the `vd_get_apikey` function which is hooked to `wp_ajax_virusdie_apikey`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve the site&#39;s Virusdie API key, which could be used to access the site owner&#39;s Virusdie account and potentially compromise site security.</p> https://cve.radiocsirt.org/vuln/ghsa-g989-4692-3qw2