https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:23:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-344198 EUVD-2026-344198 https://cve.radiocsirt.org/vuln/euvd-2026-344198 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12586 <p>The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including an administrator) and take over the account.</p> <p>The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including an administrator) and take over the account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12586 https://cve.radiocsirt.org/vuln/ghsa-rhj3-v77h-x35q <p>The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including an administrator) and take over the account.</p> <p>The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing unauthenticated attackers to reset the password of any user (including an administrator) and take over the account.</p> https://cve.radiocsirt.org/vuln/ghsa-rhj3-v77h-x35q