https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T12:49:28.892004+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-87839 fkie_cve-2026-87839 2026-09-30T12:49:28.912025+00:00

The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unauthenticated users, allowing them to permanently delete arbitrary comments on the site.

 https://vulnerability.circl.lu/vuln/ghsa-2g8q-36c3-9gj4 GHSA-2g8q-36c3-9gj4 2026-09-30T12:49:28.912456+00:00

The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unauthenticated users, allowing them to permanently delete arbitrary comments on the site.