PT-2026-95785

Name of the Vulnerable Software and Affected Versions VW Writer Blog theme for WordPress versions prior to 1.3.9 Description The software allows unauthorized modification of data because the vw writer blog reset all settings function lacks a proper capability check. Authenticated users with...

CVE-2026-1924

The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4. This is due to missing nonce verification on the ahscajaxresetoptions function. This makes it possible for unauthenticated attackers to reset all plugin settings t...

PT-2023-11370

Name of the Vulnerable Software and Affected Versions GDPR Cookie Compliance plugin for WordPress versions up to, and including, 4.0.2 Description The issue is related to a missing capability check on the gdpr cookie compliance reset settings AJAX action, which allows authenticated attackers to...