<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 05 Oct 2026 03:18:43 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-16979</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-16979</link>
      <description>&lt;p&gt;The SmartCrawl SEO checker, analyzer &amp;amp; optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users with at least the Subscriber role to read the titles of private and draft posts by ID and to enumerate stored post-meta key names.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The SmartCrawl SEO checker, analyzer &amp;amp; optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users with at least the Subscriber role to read the titles of private and draft posts by ID and to enumerate stored post-meta key names.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-16979</guid>
    </item>
    <item>
      <title>GHSA-rx4h-9w25-87vh</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-rx4h-9w25-87vh</link>
      <description>&lt;p&gt;The SmartCrawl SEO checker, analyzer &amp;amp; optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users with at least the Subscriber role to read the titles of private and draft posts by ID and to enumerate stored post-meta key names.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The SmartCrawl SEO checker, analyzer &amp;amp; optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users with at least the Subscriber role to read the titles of private and draft posts by ID and to enumerate stored post-meta key names.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-rx4h-9w25-87vh</guid>
    </item>
  </channel>
</rss>
