https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:41:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-344192 EUVD-2026-344192 https://cve.radiocsirt.org/vuln/euvd-2026-344192 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16057 <p>The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other content they do not own.</p> <p>The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other content they do not own.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16057 https://cve.radiocsirt.org/vuln/ghsa-pwq7-3xxm-qxqg <p>The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other content they do not own.</p> <p>The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other content they do not own.</p> https://cve.radiocsirt.org/vuln/ghsa-pwq7-3xxm-qxqg