Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:22:34 +0000 CVE-2026-93507 — WC Fields Factory < 4.1.11 - Contributor+ Arbitrary Post Cloning and Private Content Disclosure https://db.gcve.eu/vuln/cve-2026-93507 <p><strong>Affected:</strong> Unknown WC Fields Factory</p> <p>The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and above to duplicate arbitrary posts of any type or status, including other users&#39; private or draft content, and gain read access to the resulting copy.</p> <p><strong>Affected:</strong> Unknown WC Fields Factory</p> <p>The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and above to duplicate arbitrary posts of any type or status, including other users&#39; private or draft content, and gain read access to the resulting copy.</p> https://db.gcve.eu/vuln/cve-2026-93507