<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 09:46:48 +0000</lastBuildDate>
    <item>
      <title>CVE-2022-4555 — WP Shamsi &lt;= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2022-4555</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; wpvar WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس&lt;/p&gt;
&lt;p&gt;The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deactivate() function hooked via init() in versions up to, and including, 4.1.0. This makes it possible for unauthenticated attackers to deactivate arbitrary plugins on the site. This can be used to deactivate security plugins that aids in exploiting other vulnerabilities.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; wpvar WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس&lt;/p&gt;
&lt;p&gt;The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deactivate() function hooked via init() in versions up to, and including, 4.1.0. This makes it possible for unauthenticated attackers to deactivate arbitrary plugins on the site. This can be used to deactivate security plugins that aids in exploiting other vulnerabilities.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2022-4555</guid>
    </item>
  </channel>
</rss>
