<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 22 Oct 2026 14:15:50 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-0978 — My Private Site &lt;= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2024-0978</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; dgewirtz My Private Site, zatzlabs my_private_site&lt;/p&gt;
&lt;p&gt;The My Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.14 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin&amp;#39;s site privacy feature and view restricted page and post content.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; dgewirtz My Private Site, zatzlabs my_private_site&lt;/p&gt;
&lt;p&gt;The My Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.14 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin&amp;#39;s site privacy feature and view restricted page and post content.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2024-0978</guid>
    </item>
  </channel>
</rss>
