Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:57:51 +0000 CVE-2023-6066 — WP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/Update https://cve.radiocsirt.org/vuln/cve-2023-6066 <p><strong>Affected:</strong> Unknown WP Custom Widget area</p> <p>The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of its AJAX action callback functions, which could allow attackers with subscriber+ privilege to create, delete or modify menus on the site.</p> <p><strong>Affected:</strong> Unknown WP Custom Widget area</p> <p>The WP Custom Widget area WordPress plugin through 1.2.5 does not properly apply capability and nonce checks on any of its AJAX action callback functions, which could allow attackers with subscriber+ privilege to create, delete or modify menus on the site.</p> https://cve.radiocsirt.org/vuln/cve-2023-6066