Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:42:16 +0000 EUVD-2026-350805 https://cve.radiocsirt.org/vuln/euvd-2026-350805 EUVD-2026-350805 https://cve.radiocsirt.org/vuln/euvd-2026-350805 fkie_cve-2026-18032 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18032 <p>The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected front-end form is bound to, including user password hashes where that table is the users table.</p> <p>The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected front-end form is bound to, including user password hashes where that table is the users table.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18032 GHSA-chrp-6wq4-c4qg https://cve.radiocsirt.org/vuln/ghsa-chrp-6wq4-c4qg <p>The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected front-end form is bound to, including user password hashes where that table is the users table.</p> <p>The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected front-end form is bound to, including user password hashes where that table is the users table.</p> https://cve.radiocsirt.org/vuln/ghsa-chrp-6wq4-c4qg