https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 18:28:12 +0000 https://cve.radiocsirt.org/vuln/cve-2026-15388 <p><strong>Affected:</strong> Unknown Cookie Consent</p> <p>The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST routes, so they fall back to an authentication-only gate, allowing any authenticated user such as a subscriber to update the Cookie Consent WordPress plugin before 0.0.10&#39;s consent settings and, on sites connected to the vendor&#39;s paid plan, read stored visitor consent logs.</p> <p><strong>Affected:</strong> Unknown Cookie Consent</p> <p>The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST routes, so they fall back to an authentication-only gate, allowing any authenticated user such as a subscriber to update the Cookie Consent WordPress plugin before 0.0.10&#39;s consent settings and, on sites connected to the vendor&#39;s paid plan, read stored visitor consent logs.</p> https://cve.radiocsirt.org/vuln/cve-2026-15388