https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:40:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-292353 EUVD-2026-292353 https://cve.radiocsirt.org/vuln/euvd-2026-292353 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4128 <p>The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which handles the &#39;tpmcattt_delete_term&#39; AJAX action, does not perform any capability check (e.g., current_user_can()) to verify the user has sufficient permissions. While it does verify a nonce via check_ajax_referer(), this nonce is generated for all authenticated users via the admin_enqueue_scripts hook and exposed on any wp-admin page (including profile.php, which subscribers can access). This makes it possible for authenticated attackers, with Subscriber-level access and above, to permanently delete taxonomy term records from the plugin&#39;s trash/backup tables by sending a crafted AJAX request with a valid nonce and an arbitrary term_id.</p> <p>The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which handles the &#39;tpmcattt_delete_term&#39; AJAX action, does not perform any capability check (e.g., current_user_can()) to verify the user has sufficient permissions. While it does verify a nonce via check_ajax_referer(), this nonce is generated for all authenticated users via the admin_enqueue_scripts hook and exposed on any wp-admin page (including profile.php, which subscribers can access). This makes it possible for authenticated attackers, with Subscriber-level access and above, to permanently delete taxonomy term records from the plugin&#39;s trash/backup tables by sending a crafted AJAX request with a valid nonce and an arbitrary term_id.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-4128 https://cve.radiocsirt.org/vuln/ghsa-gwg7-cjw3-gqff <p>The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which handles the &#39;tpmcattt_delete_term&#39; AJAX action, does not perform any capability check (e.g., current_user_can()) to verify the user has sufficient permissions. While it does verify a nonce via check_ajax_referer(), this nonce is generated for all authenticated users via the admin_enqueue_scripts hook and exposed on any wp-admin page (including profile.php, which subscribers can access). This makes it possible for authenticated attackers, with Subscriber-level access and above, to permanently delete taxonomy term records from the plugin&#39;s trash/backup tables by sending a crafted AJAX request with a valid nonce and an arbitrary term_id.</p> <p>The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which handles the &#39;tpmcattt_delete_term&#39; AJAX action, does not perform any capability check (e.g., current_user_can()) to verify the user has sufficient permissions. While it does verify a nonce via check_ajax_referer(), this nonce is generated for all authenticated users via the admin_enqueue_scripts hook and exposed on any wp-admin page (including profile.php, which subscribers can access). This makes it possible for authenticated attackers, with Subscriber-level access and above, to permanently delete taxonomy term records from the plugin&#39;s trash/backup tables by sending a crafted AJAX request with a valid nonce and an arbitrary term_id.</p> https://cve.radiocsirt.org/vuln/ghsa-gwg7-cjw3-gqff