https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:03:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-275426 EUVD-2026-275426 https://cve.radiocsirt.org/vuln/euvd-2026-275426 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1867 <p>The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6&#39;s settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator&#39;s email address.</p> <p>The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6&#39;s settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator&#39;s email address.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1867 https://cve.radiocsirt.org/vuln/ghsa-w8vw-4787-pf8f <p>The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6&#39;s settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator&#39;s email address.</p> <p>The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6&#39;s settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator&#39;s email address.</p> https://cve.radiocsirt.org/vuln/ghsa-w8vw-4787-pf8f