Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:36:36 +0000 cnvd-2026-16065 https://cve.radiocsirt.org/vuln/cnvd-2026-16065 cnvd-2026-16065 https://cve.radiocsirt.org/vuln/cnvd-2026-16065 EUVD-2026-288599 https://cve.radiocsirt.org/vuln/euvd-2026-288599 EUVD-2026-288599 https://cve.radiocsirt.org/vuln/euvd-2026-288599 fkie_cve-2026-2571 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2571 <p>The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;reviewUserStatus&#39; function in all versions up to, and including, 3.3.49. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive information for any user on the site including email addresses, display names, and registration dates.</p> <p>The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;reviewUserStatus&#39; function in all versions up to, and including, 3.3.49. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive information for any user on the site including email addresses, display names, and registration dates.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-2571 GHSA-94v4-f8fh-fgp2 https://cve.radiocsirt.org/vuln/ghsa-94v4-f8fh-fgp2 <p>The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;reviewUserStatus&#39; function in all versions up to, and including, 3.3.49. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive information for any user on the site including email addresses, display names, and registration dates.</p> <p>The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;reviewUserStatus&#39; function in all versions up to, and including, 3.3.49. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive information for any user on the site including email addresses, display names, and registration dates.</p> https://cve.radiocsirt.org/vuln/ghsa-94v4-f8fh-fgp2