https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 00:33:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-329800 EUVD-2026-329800 https://cve.radiocsirt.org/vuln/euvd-2026-329800 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10753 <p>The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0 setting that should only be modifiable by administrators.</p> <p>The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0 setting that should only be modifiable by administrators.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10753 https://cve.radiocsirt.org/vuln/ghsa-8rqq-v4wf-9qrm <p>The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0 setting that should only be modifiable by administrators.</p> <p>The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0 setting that should only be modifiable by administrators.</p> https://cve.radiocsirt.org/vuln/ghsa-8rqq-v4wf-9qrm