Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:48:50 +0000 EUVD-2026-287637 https://cve.radiocsirt.org/vuln/euvd-2026-287637 EUVD-2026-287637 https://cve.radiocsirt.org/vuln/euvd-2026-287637 fkie_cve-2026-2295 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2295 <p>The WPZOOM Addons for Elementor – Starter Templates &amp; Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;ajax_post_grid_load_more&#39; function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users.</p> <p>The WPZOOM Addons for Elementor – Starter Templates &amp; Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;ajax_post_grid_load_more&#39; function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-2295 GHSA-68cw-mrhh-x9wc https://cve.radiocsirt.org/vuln/ghsa-68cw-mrhh-x9wc <p>The WPZOOM Addons for Elementor – Starter Templates &amp; Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;ajax_post_grid_load_more&#39; function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users.</p> <p>The WPZOOM Addons for Elementor – Starter Templates &amp; Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;ajax_post_grid_load_more&#39; function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users.</p> https://cve.radiocsirt.org/vuln/ghsa-68cw-mrhh-x9wc