Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:56:33 +0000 CVE-2026-1867 — WP Front User Submit < 5.0.6 - Unauthenticated Sensitive Information Exposure https://cve.radiocsirt.org/vuln/cve-2026-1867 <p><strong>Affected:</strong> Unknown Guest posting / Frontend Posting / Front Editor</p> <p>The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6&#39;s settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator&#39;s email address.</p> <p><strong>Affected:</strong> Unknown Guest posting / Frontend Posting / Front Editor</p> <p>The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6&#39;s settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator&#39;s email address.</p> https://cve.radiocsirt.org/vuln/cve-2026-1867