https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 18:55:38 +0000 https://vulnerability.circl.lu/vuln/cnvd-2022-55728 cnvd-2022-55728 https://vulnerability.circl.lu/vuln/cnvd-2022-55728 https://vulnerability.circl.lu/vuln/fkie_cve-2021-25116 <p>The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. As a result, low privilege users such as subscriber could delete arbitrary assets, as well as put arbitrary posts in the trash.</p> <p>The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. As a result, low privilege users such as subscriber could delete arbitrary assets, as well as put arbitrary posts in the trash.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2021-25116 https://vulnerability.circl.lu/vuln/ghsa-qj28-v8qh-ccqw <p>The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. As a result, low privilege users such as subscriber could delete arbitrary assets, as well as put arbitrary posts in the trash.</p> <p>The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. As a result, low privilege users such as subscriber could delete arbitrary assets, as well as put arbitrary posts in the trash.</p> https://vulnerability.circl.lu/vuln/ghsa-qj28-v8qh-ccqw https://vulnerability.circl.lu/vuln/gsd-2021-25116 gsd-2021-25116 https://vulnerability.circl.lu/vuln/gsd-2021-25116