https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:52:07 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-90972 <p>The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users&#39; email addresses and to trigger a cross-user CRM re-sync.</p> <p>The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users&#39; email addresses and to trigger a cross-user CRM re-sync.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-90972 https://vulnerability.circl.lu/vuln/ghsa-259g-3h2p-gwg5 <p>The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users&#39; email addresses and to trigger a cross-user CRM re-sync.</p> <p>The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users&#39; email addresses and to trigger a cross-user CRM re-sync.</p> https://vulnerability.circl.lu/vuln/ghsa-259g-3h2p-gwg5