https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T03:17:10.415422+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2025-23720 cnvd-2025-23720 2026-10-23T03:17:10.436015+00:00 cnvd-2025-23720 https://db.gcve.eu/vuln/fkie_cve-2025-9194 fkie_cve-2025-9194 2026-10-23T03:17:10.436094+00:00

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean() function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a theme clean.

 https://db.gcve.eu/vuln/ghsa-4f58-vvc9-2mmg GHSA-4f58-vvc9-2mmg 2026-10-23T03:17:10.436147+00:00

The Constructor theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clean() function in all versions up to, and including, 1.6.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a theme clean.