Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 09:14:30 +0000 CVE-2026-110514 — WPZOOM Portfolio < 1.4.34 - Contributor+ Arbitrary Post/Page Type Overwrite via IDOR https://db.gcve.eu/vuln/cve-2026-110514 <p><strong>Affected:</strong> Unknown WPZOOM Portfolio Lite</p> <p>The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to edit a post before changing its type and order, which could allow users with the contributor role and above to convert any other user&#39;s posts and pages into portfolio items, removing them from their original listings and URLs.</p> <p><strong>Affected:</strong> Unknown WPZOOM Portfolio Lite</p> <p>The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to edit a post before changing its type and order, which could allow users with the contributor role and above to convert any other user&#39;s posts and pages into portfolio items, removing them from their original listings and URLs.</p> https://db.gcve.eu/vuln/cve-2026-110514