https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 18:26:47 +0000 https://cve.radiocsirt.org/vuln/cve-2025-2568 <p><strong>Affected:</strong> themehunk Vayu Blocks – Gutenberg Blocks for WordPress &amp; WooCommerce</p> <p>The Vayu Blocks – Gutenberg Blocks for WordPress &amp; WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the &#39;vayu_blocks_get_toggle_switch_values_callback&#39; and &#39;vayu_blocks_save_toggle_switch_callback&#39; function in versions 1.0.4 to 1.2.1. This makes it possible for unauthenticated attackers to read plugin options and update any option with a key name ending in &#39;_value&#39;.</p> <p><strong>Affected:</strong> themehunk Vayu Blocks – Gutenberg Blocks for WordPress &amp; WooCommerce</p> <p>The Vayu Blocks – Gutenberg Blocks for WordPress &amp; WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the &#39;vayu_blocks_get_toggle_switch_values_callback&#39; and &#39;vayu_blocks_save_toggle_switch_callback&#39; function in versions 1.0.4 to 1.2.1. This makes it possible for unauthenticated attackers to read plugin options and update any option with a key name ending in &#39;_value&#39;.</p> https://cve.radiocsirt.org/vuln/cve-2025-2568