https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T22:31:07.351009+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-115257 CVE-2026-115257 — WP Roster < 2.36 - Unauthenticated Roster Data Modification 2026-11-05T22:31:07.354204+00:00

Affected: Unknown WP Roster

The WP Roster WordPress plugin before 2.36 does not perform any capability or nonce checks before writing its stored roster data, allowing unauthenticated attackers to overwrite, wipe or restore the content of any roster.