https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 21:17:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351246 EUVD-2026-351246 https://cve.radiocsirt.org/vuln/euvd-2026-351246 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16965 <p>The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, via CSRF, any logged-in user) to update post meta on arbitrary posts and to deactivate the site&#39;s active templates.</p> <p>The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, via CSRF, any logged-in user) to update post meta on arbitrary posts and to deactivate the site&#39;s active templates.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16965 https://cve.radiocsirt.org/vuln/ghsa-777w-f323-336m <p>The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, via CSRF, any logged-in user) to update post meta on arbitrary posts and to deactivate the site&#39;s active templates.</p> <p>The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, via CSRF, any logged-in user) to update post meta on arbitrary posts and to deactivate the site&#39;s active templates.</p> https://cve.radiocsirt.org/vuln/ghsa-777w-f323-336m