Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 05:21:45 +0000 CVE-2026-15382 — Ultimate Addons for WPBakery Page Builder < 3.21.4 - Unauthenticated Custom Icon Font Deletion via delete-bsf-fonts https://cve.radiocsirt.org/vuln/cve-2026-15382 <p><strong>Affected:</strong> Unknown Ultimate Addons for WPBakery Page Builder</p> <p>The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site&#39;s custom-uploaded icon font packs, allowing unauthenticated attackers to permanently delete all of a site&#39;s custom icon fonts with a single request.</p> <p><strong>Affected:</strong> Unknown Ultimate Addons for WPBakery Page Builder</p> <p>The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site&#39;s custom-uploaded icon font packs, allowing unauthenticated attackers to permanently delete all of a site&#39;s custom icon fonts with a single request.</p> https://cve.radiocsirt.org/vuln/cve-2026-15382