https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 11:39:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351390 EUVD-2026-351390 https://cve.radiocsirt.org/vuln/euvd-2026-351390 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18943 <p>The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to administrators.</p> <p>The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to administrators.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18943 https://cve.radiocsirt.org/vuln/ghsa-g4v7-86p8-gx99 <p>The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to administrators.</p> <p>The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to administrators.</p> https://cve.radiocsirt.org/vuln/ghsa-g4v7-86p8-gx99