https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 23:38:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341001 EUVD-2026-341001 https://cve.radiocsirt.org/vuln/euvd-2026-341001 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12689 <p>The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users with Subscriber-level access and above to soft-delete, tamper with the metadata of, and mark as read other users&#39; private message threads.</p> <p>The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users with Subscriber-level access and above to soft-delete, tamper with the metadata of, and mark as read other users&#39; private message threads.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12689 https://cve.radiocsirt.org/vuln/ghsa-gv3q-r4q9-h53h <p>The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users with Subscriber-level access and above to soft-delete, tamper with the metadata of, and mark as read other users&#39; private message threads.</p> <p>The ProfileGrid WordPress plugin before 5.9.9.7 does not perform any authorization or ownership check on some of its private-message thread actions, allowing authenticated users with Subscriber-level access and above to soft-delete, tamper with the metadata of, and mark as read other users&#39; private message threads.</p> https://cve.radiocsirt.org/vuln/ghsa-gv3q-r4q9-h53h