https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 16:32:23 +0000 https://cve.radiocsirt.org/vuln/cve-2026-4297 <p><strong>Affected:</strong> newscred Welcome Software Publishing</p> <p>The Welcome Software Publishing plugin for WordPress is vulnerable to Arbitrary Options Update in all versions up to and including 0.0.31. This is due to a missing capability check in the nc_setOption() function, which is exposed via the nc.setOption XML-RPC method. The function authenticates the user via $wp_xmlrpc_server-&gt;login() (verifying credentials are valid) but does not perform any authorization check such as current_user_can(&#39;manage_options&#39;). This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary WordPress options via XML-RPC requests. This can be leveraged to change the default_role option to &#39;administrator&#39; and then register a new administrator account, achieving full privilege escalation and site takeover.</p> <p><strong>Affected:</strong> newscred Welcome Software Publishing</p> <p>The Welcome Software Publishing plugin for WordPress is vulnerable to Arbitrary Options Update in all versions up to and including 0.0.31. This is due to a missing capability check in the nc_setOption() function, which is exposed via the nc.setOption XML-RPC method. The function authenticates the user via $wp_xmlrpc_server-&gt;login() (verifying credentials are valid) but does not perform any authorization check such as current_user_can(&#39;manage_options&#39;). This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary WordPress options via XML-RPC requests. This can be leveraged to change the default_role option to &#39;administrator&#39; and then register a new administrator account, achieving full privilege escalation and site takeover.</p> https://cve.radiocsirt.org/vuln/cve-2026-4297