https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 06:50:30 +0000 https://cve.radiocsirt.org/vuln/cve-2026-8616 <p><strong>Affected:</strong> devozon Fense Proxy &amp; VPN Blocker</p> <p>The Fense Proxy &amp; VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce validation on the fense_bpvt_save_settings() function in versions up to, and including, 3.0.1. The callback is registered to both wp_ajax_* and wp_ajax_nopriv_* hooks and unconditionally calls delete_option() on four plugin options and delete_transient() on three transients tied to the plugin&#39;s API key cache and settings. This makes it possible for unauthenticated attackers to delete plugin options and transients, effectively resetting the plugin&#39;s API key/data cache and forcing the plugin to refetch state.</p> <p><strong>Affected:</strong> devozon Fense Proxy &amp; VPN Blocker</p> <p>The Fense Proxy &amp; VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce validation on the fense_bpvt_save_settings() function in versions up to, and including, 3.0.1. The callback is registered to both wp_ajax_* and wp_ajax_nopriv_* hooks and unconditionally calls delete_option() on four plugin options and delete_transient() on three transients tied to the plugin&#39;s API key cache and settings. This makes it possible for unauthenticated attackers to delete plugin options and transients, effectively resetting the plugin&#39;s API key/data cache and forcing the plugin to refetch state.</p> https://cve.radiocsirt.org/vuln/cve-2026-8616