<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 23:53:22 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-16056 — Contest Gallery &lt; 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_prompts</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2026-16056</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Contest Gallery&lt;/p&gt;
&lt;p&gt;The Contest Gallery  WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site&amp;#39;s entire stored OpenAI prompt history.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Unknown Contest Gallery&lt;/p&gt;
&lt;p&gt;The Contest Gallery  WordPress plugin before 30.0.7 does not perform any capability or nonce check in one of its handlers, allowing any authenticated user down to Subscriber to read the site&amp;#39;s entire stored OpenAI prompt history.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2026-16056</guid>
    </item>
  </channel>
</rss>
