https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:57:27 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-15260 <p>The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access or above to modify or permanently delete other users&#39; and posts&#39; geolocation records by supplying arbitrary record IDs.</p> <p>The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access or above to modify or permanently delete other users&#39; and posts&#39; geolocation records by supplying arbitrary record IDs.</p> https://db.gcve.eu/vuln/fkie_cve-2026-15260 https://db.gcve.eu/vuln/ghsa-qgxr-8r3m-cw55 <p>The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access or above to modify or permanently delete other users&#39; and posts&#39; geolocation records by supplying arbitrary record IDs.</p> <p>The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access or above to modify or permanently delete other users&#39; and posts&#39; geolocation records by supplying arbitrary record IDs.</p> https://db.gcve.eu/vuln/ghsa-qgxr-8r3m-cw55