https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:19:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343398 EUVD-2026-343398 https://cve.radiocsirt.org/vuln/euvd-2026-343398 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8155 <p>The BuddyPress WordPress plugin before 14.5.0 does not properly enforce authorization on its private messaging endpoints, allowing any authenticated user (Subscriber+) to read, modify, or delete other users&#39; private messages.</p> <p>The BuddyPress WordPress plugin before 14.5.0 does not properly enforce authorization on its private messaging endpoints, allowing any authenticated user (Subscriber+) to read, modify, or delete other users&#39; private messages.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8155 https://cve.radiocsirt.org/vuln/ghsa-6pp9-x443-r8xw <p>The BuddyPress WordPress plugin before 14.5.0 does not properly enforce authorization on its private messaging endpoints, allowing any authenticated user (Subscriber+) to read, modify, or delete other users&#39; private messages.</p> <p>The BuddyPress WordPress plugin before 14.5.0 does not properly enforce authorization on its private messaging endpoints, allowing any authenticated user (Subscriber+) to read, modify, or delete other users&#39; private messages.</p> https://cve.radiocsirt.org/vuln/ghsa-6pp9-x443-r8xw