Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 16:14:30 +0000 CVE-2025-15507 — Magic Import Document Extractor <= 1.0.5 - Missing Authorization to Unauthenticated Plugin License Status Modification https://cve.radiocsirt.org/vuln/cve-2025-15507 <p><strong>Affected:</strong> magicimport Magic Import Document Extractor</p> <p>The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_sync_usage() function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to modify the plugin&#39;s license status and credit balance.</p> <p><strong>Affected:</strong> magicimport Magic Import Document Extractor</p> <p>The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_sync_usage() function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to modify the plugin&#39;s license status and credit balance.</p> https://cve.radiocsirt.org/vuln/cve-2025-15507