https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:04:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-338264 EUVD-2026-338264 https://cve.radiocsirt.org/vuln/euvd-2026-338264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12907 <p>The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and activate a site-wide template that overrides the header, footer or other global areas displayed to all visitors, which is normally restricted to administrators.</p> <p>The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and activate a site-wide template that overrides the header, footer or other global areas displayed to all visitors, which is normally restricted to administrators.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12907 https://cve.radiocsirt.org/vuln/ghsa-q754-gwx4-mxg2 <p>The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and activate a site-wide template that overrides the header, footer or other global areas displayed to all visitors, which is normally restricted to administrators.</p> <p>The RTMKit WordPress plugin before 2.0.9 does not perform a proper capability check on one of its -builder AJAX actions, allowing users with at least the Author role to create and activate a site-wide template that overrides the header, footer or other global areas displayed to all visitors, which is normally restricted to administrators.</p> https://cve.radiocsirt.org/vuln/ghsa-q754-gwx4-mxg2