https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T15:10:43.021750+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111631 CVE-2026-111631 — Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions 2026-10-17T15:10:43.023100+00:00

Affected: 10up Distributor

Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended for manage_options users. Attackers can call dt_verify_external_connection with a chosen endpointId and url to send stored connection credentials to attacker-controlled servers, or abuse dt_begin_authorization to create connections.