https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:35:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-361098 EUVD-2026-361098 https://cve.radiocsirt.org/vuln/euvd-2026-361098 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14567 <p>The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators.</p> <p>The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14567 https://cve.radiocsirt.org/vuln/ghsa-vwp5-qxw4-4vgw <p>The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators.</p> <p>The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators.</p> https://cve.radiocsirt.org/vuln/ghsa-vwp5-qxw4-4vgw