https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 23:02:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-288629 EUVD-2026-288629 https://cve.radiocsirt.org/vuln/euvd-2026-288629 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3550 <p>The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17. This is due to missing capability checks on multiple AJAX actions (rockpress_import, rockpress_import_status, rockpress_last_import, rockpress_reset_import, and rockpress_check_services) combined with the plugin&#39;s nonce being exposed to all authenticated users via an unconditionally enqueued admin script. The plugin enqueues the &#39;rockpress-admin&#39; script on all admin pages (including profile.php) without any page or capability restrictions, and the nonce for the &#39;rockpress-nonce&#39; action is passed to this script via wp_localize_script. Since the AJAX handlers only verify this nonce and do not check current_user_can(), any authenticated user, including Subscribers, can extract the nonce from any admin page&#39;s HTML source and use it to trigger imports, reset import data (deleting options), check service connectivity, and read import status information. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger resource-intensive import operations, reset import tracking data, and perform system connection checks that should be restricted to administrators.</p> <p>The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17. This is due to missing capability checks on multiple AJAX actions (rockpress_import, rockpress_import_status, rockpress_last_import, rockpress_reset_import, and rockpress_check_services) combined with the plugin&#39;s nonce being exposed to all authenticated users via an unconditionally enqueued admin script. The plugin enqueues the &#39;rockpress-admin&#39; script on all admin pages (including profile.php) without any page or capability restrictions, and the nonce for the &#39;rockpress-nonce&#39; action is passed to this script via wp_localize_script. Since the AJAX handlers only verify this nonce and do not check current_user_can(), any authenticated user, including Subscribers, can extract the nonce from any admin page&#39;s HTML source and use it to trigger imports, reset import data (deleting options), check service connectivity, and read import status information. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger resource-intensive import operations, reset import tracking data, and perform system connection checks that should be restricted to administrators.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3550 https://cve.radiocsirt.org/vuln/ghsa-h8h7-j779-2pwx <p>The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17. This is due to missing capability checks on multiple AJAX actions (rockpress_import, rockpress_import_status, rockpress_last_import, rockpress_reset_import, and rockpress_check_services) combined with the plugin&#39;s nonce being exposed to all authenticated users via an unconditionally enqueued admin script. The plugin enqueues the &#39;rockpress-admin&#39; script on all admin pages (including profile.php) without any page or capability restrictions, and the nonce for the &#39;rockpress-nonce&#39; action is passed to this script via wp_localize_script. Since the AJAX handlers only verify this nonce and do not check current_user_can(), any authenticated user, including Subscribers, can extract the nonce from any admin page&#39;s HTML source and use it to trigger imports, reset import data (deleting options), check service connectivity, and read import status information. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger resource-intensive import operations, reset import tracking data, and perform system connection checks that should be restricted to administrators.</p> <p>The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17. This is due to missing capability checks on multiple AJAX actions (rockpress_import, rockpress_import_status, rockpress_last_import, rockpress_reset_import, and rockpress_check_services) combined with the plugin&#39;s nonce being exposed to all authenticated users via an unconditionally enqueued admin script. The plugin enqueues the &#39;rockpress-admin&#39; script on all admin pages (including profile.php) without any page or capability restrictions, and the nonce for the &#39;rockpress-nonce&#39; action is passed to this script via wp_localize_script. Since the AJAX handlers only verify this nonce and do not check current_user_can(), any authenticated user, including Subscribers, can extract the nonce from any admin page&#39;s HTML source and use it to trigger imports, reset import data (deleting options), check service connectivity, and read import status information. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger resource-intensive import operations, reset import tracking data, and perform system connection checks that should be restricted to administrators.</p> https://cve.radiocsirt.org/vuln/ghsa-h8h7-j779-2pwx