https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:28:32 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2023-0441 <p>The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber. The callback function allows numerous actions, the most serious one being reading and updating the WordPress options which could be used to enable registration with a default administrator user role.</p> <p>The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber. The callback function allows numerous actions, the most serious one being reading and updating the WordPress options which could be used to enable registration with a default administrator user role.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2023-0441 https://vulnerability.circl.lu/vuln/ghsa-pwfp-fm3h-8frv <p>The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber. The callback function allows numerous actions, the most serious one being reading and updating the WordPress options which could be used to enable registration with a default administrator user role.</p> <p>The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenticated users, such as subscriber. The callback function allows numerous actions, the most serious one being reading and updating the WordPress options which could be used to enable registration with a default administrator user role.</p> https://vulnerability.circl.lu/vuln/ghsa-pwfp-fm3h-8frv https://vulnerability.circl.lu/vuln/gsd-2023-0441 gsd-2023-0441 https://vulnerability.circl.lu/vuln/gsd-2023-0441