Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 21:37:20 +0000 CVE-2026-11781 — Adminify < 4.2.10 - Contributor+ Sensitive Information Disclosure via Global Search AJAX https://cve.radiocsirt.org/vuln/cve-2026-11781 <p><strong>Affected:</strong> Unknown Adminify</p> <p>The Adminify WordPress plugin before 4.2.10 does not perform per-user read-capability checks on the results returned by one of its administration search features, allowing users with a low-privilege role (Contributor) to disclose non-public content that WordPress would not otherwise expose to them, such as other authors&#39; unpublished post titles, pending comment content, the site&#39;s Adminify WordPress plugin before 4.2.10 inventory, and user account names.</p> <p><strong>Affected:</strong> Unknown Adminify</p> <p>The Adminify WordPress plugin before 4.2.10 does not perform per-user read-capability checks on the results returned by one of its administration search features, allowing users with a low-privilege role (Contributor) to disclose non-public content that WordPress would not otherwise expose to them, such as other authors&#39; unpublished post titles, pending comment content, the site&#39;s Adminify WordPress plugin before 4.2.10 inventory, and user account names.</p> https://cve.radiocsirt.org/vuln/cve-2026-11781