https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:43:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-354616 EUVD-2026-354616 https://cve.radiocsirt.org/vuln/euvd-2026-354616 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14229 <p>The ECS WordPress plugin before 4.3.8 does not check the post status or any capability when rendering an Elementor document requested through one of its AJAX actions, allowing unauthenticated users to retrieve the rendered content of unpublished (private, draft, pending) documents by supplying their identifier.</p> <p>The ECS WordPress plugin before 4.3.8 does not check the post status or any capability when rendering an Elementor document requested through one of its AJAX actions, allowing unauthenticated users to retrieve the rendered content of unpublished (private, draft, pending) documents by supplying their identifier.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14229 https://cve.radiocsirt.org/vuln/ghsa-phww-7g4v-vrwj <p>The ECS WordPress plugin before 4.3.8 does not check the post status or any capability when rendering an Elementor document requested through one of its AJAX actions, allowing unauthenticated users to retrieve the rendered content of unpublished (private, draft, pending) documents by supplying their identifier.</p> <p>The ECS WordPress plugin before 4.3.8 does not check the post status or any capability when rendering an Elementor document requested through one of its AJAX actions, allowing unauthenticated users to retrieve the rendered content of unpublished (private, draft, pending) documents by supplying their identifier.</p> https://cve.radiocsirt.org/vuln/ghsa-phww-7g4v-vrwj