https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:02:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-326636 EUVD-2026-326636 https://cve.radiocsirt.org/vuln/euvd-2026-326636 https://cve.radiocsirt.org/vuln/fkie_cve-2026-53738 <p>Copy &amp; Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.</p> <p>Copy &amp; Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-53738 https://cve.radiocsirt.org/vuln/ghsa-cx2j-wv5h-5j6v <p>Copy &amp; Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.</p> <p>Copy &amp; Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.</p> https://cve.radiocsirt.org/vuln/ghsa-cx2j-wv5h-5j6v