https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T15:41:38.913232+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2025-14540 fkie_cve-2025-14540 2026-11-11T15:41:38.915391+00:00

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userback_get_json function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract plugin's configuration data including the Userback API access token and site's posts/pages contents, including those that have private and draft status.

 https://db.gcve.eu/vuln/ghsa-9452-q4cx-rvq7 GHSA-9452-q4cx-rvq7 2026-11-11T15:41:38.915485+00:00

The Userback plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the userback_get_json function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract plugin's configuration data including the Userback API access token and site's posts/pages contents, including those that have private and draft status.