https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:30:24 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-78153 <p>The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users.</p> <p>The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-78153 https://vulnerability.circl.lu/vuln/ghsa-2hp9-5v75-v9jj <p>The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users.</p> <p>The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users.</p> https://vulnerability.circl.lu/vuln/ghsa-2hp9-5v75-v9jj