https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 10:54:45 +0000 https://vulnerability.circl.lu/vuln/cve-2021-25116 <p><strong>Affected:</strong> Unknown Enqueue Anything</p> <p>The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. As a result, low privilege users such as subscriber could delete arbitrary assets, as well as put arbitrary posts in the trash.</p> <p><strong>Affected:</strong> Unknown Enqueue Anything</p> <p>The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. As a result, low privilege users such as subscriber could delete arbitrary assets, as well as put arbitrary posts in the trash.</p> https://vulnerability.circl.lu/vuln/cve-2021-25116