https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:30:41 +0000 https://cve.radiocsirt.org/vuln/cve-2021-38312 <p><strong>Affected:</strong> Redux.io Gutenberg Template Library &amp; Redux Framework</p> <p>The Gutenberg Template Library &amp; Redux Framework plugin &lt;= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php”. The `permissions_callback` used in this file only checked for the `edit_posts` capability which is granted to lower-privileged users such as contributors, allowing such users to install arbitrary plugins from the WordPress repository and edit arbitrary posts.</p> <p><strong>Affected:</strong> Redux.io Gutenberg Template Library &amp; Redux Framework</p> <p>The Gutenberg Template Library &amp; Redux Framework plugin &lt;= 4.2.11 for WordPress used an incorrect authorization check in the REST API endpoints registered under the “redux/v1/templates/” REST Route in “redux-templates/classes/class-api.php”. The `permissions_callback` used in this file only checked for the `edit_posts` capability which is granted to lower-privileged users such as contributors, allowing such users to install arbitrary plugins from the WordPress repository and edit arbitrary posts.</p> https://cve.radiocsirt.org/vuln/cve-2021-38312