https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 09:14:58 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-103964 <p>The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the &#39;first_name&#39; parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator&#39;s full Cookie header, including wordpress_logged_in_* session cookies, from the suspension email sent during the administrator&#39;s authenticated request, enabling full session hijack and account takeover. Exploitation requires an administrator to perform the Suspend action against the attacker&#39;s account, which causes the plugin to synchronously compile and send the suspension email inside the administrator&#39;s authenticated HTTP request — making the administrator&#39;s session cookies available to the template engine at send time.</p> <p>The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the &#39;first_name&#39; parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator&#39;s full Cookie header, including wordpress_logged_in_* session cookies, from the suspension email sent during the administrator&#39;s authenticated request, enabling full session hijack and account takeover. Exploitation requires an administrator to perform the Suspend action against the attacker&#39;s account, which causes the plugin to synchronously compile and send the suspension email inside the administrator&#39;s authenticated HTTP request — making the administrator&#39;s session cookies available to the template engine at send time.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-103964 https://vulnerability.circl.lu/vuln/ghsa-qj64-pjpc-4f52 <p>The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the &#39;first_name&#39; parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator&#39;s full Cookie header, including wordpress_logged_in_* session cookies, from the suspension email sent during the administrator&#39;s authenticated request, enabling full session hijack and account takeover. Exploitation requires an administrator to perform the Suspend action against the attacker&#39;s account, which causes the plugin to synchronously compile and send the suspension email inside the administrator&#39;s authenticated HTTP request — making the administrator&#39;s session cookies available to the template engine at send time.</p> <p>The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the &#39;first_name&#39; parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract the administrator&#39;s full Cookie header, including wordpress_logged_in_* session cookies, from the suspension email sent during the administrator&#39;s authenticated request, enabling full session hijack and account takeover. Exploitation requires an administrator to perform the Suspend action against the attacker&#39;s account, which causes the plugin to synchronously compile and send the suspension email inside the administrator&#39;s authenticated HTTP request — making the administrator&#39;s session cookies available to the template engine at send time.</p> https://vulnerability.circl.lu/vuln/ghsa-qj64-pjpc-4f52