Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 19:58:58 +0000 CVE-2026-9676 — f4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order Modification https://cve.radiocsirt.org/vuln/cve-2026-9676 <p><strong>Affected:</strong> Unknown F4 Post Tree</p> <p>The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts.</p> <p><strong>Affected:</strong> Unknown F4 Post Tree</p> <p>The F4 Post Tree WordPress plugin before 2.0.5 does not perform capability checks or CSRF/nonce verification on one of its AJAX actions, allowing authenticated users with Subscriber-level access and above to modify the parent and menu order of arbitrary posts.</p> https://cve.radiocsirt.org/vuln/cve-2026-9676