https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:27:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-287365 EUVD-2026-287365 https://cve.radiocsirt.org/vuln/euvd-2026-287365 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9202 <p>The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcome_notice_import_handler() function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the ThemeGrill Demo Importer plugin.</p> <p>The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcome_notice_import_handler() function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the ThemeGrill Demo Importer plugin.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-9202 https://cve.radiocsirt.org/vuln/ghsa-43mj-9cgh-6hg5 <p>The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcome_notice_import_handler() function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the ThemeGrill Demo Importer plugin.</p> <p>The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcome_notice_import_handler() function in all versions up to, and including, 4.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the ThemeGrill Demo Importer plugin.</p> https://cve.radiocsirt.org/vuln/ghsa-43mj-9cgh-6hg5