Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:29:48 +0000 CVE-2026-14567 — WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory https://cve.radiocsirt.org/vuln/cve-2026-14567 <p><strong>Affected:</strong> Unknown User Frontend</p> <p>The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators.</p> <p><strong>Affected:</strong> Unknown User Frontend</p> <p>The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators.</p> https://cve.radiocsirt.org/vuln/cve-2026-14567