https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:08:48 +0000 https://cve.radiocsirt.org/vuln/cve-2026-15286 <p><strong>Affected:</strong> stellarwp Kadence Blocks — Page Builder Toolkit for Gutenberg Editor</p> <p>The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the &#39;get_items_permission_check&#39; function permission callback of the &#39;process_pattern&#39; REST API endpoint. This makes it possible for authenticated attackers, with Contributor-level access and above, to create and immediately publish posts of any type (including pages), bypassing the standard WordPress review workflow where contributors must submit posts for administrator approval.</p> <p><strong>Affected:</strong> stellarwp Kadence Blocks — Page Builder Toolkit for Gutenberg Editor</p> <p>The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized post publication in all versions up to, and including, 3.5.32 due to a misconfigured capability check on the &#39;get_items_permission_check&#39; function permission callback of the &#39;process_pattern&#39; REST API endpoint. This makes it possible for authenticated attackers, with Contributor-level access and above, to create and immediately publish posts of any type (including pages), bypassing the standard WordPress review workflow where contributors must submit posts for administrator approval.</p> https://cve.radiocsirt.org/vuln/cve-2026-15286