https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T23:14:50.132792+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-89023 fkie_cve-2026-89023 2026-09-28T23:14:50.640289+00:00

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numeric identifier, and access dashboard statistics to disclose bidder contact information, offer details, messages, verification tokens, and business data.

 https://vulnerability.circl.lu/vuln/ghsa-2wh4-7p8q-3mh2 GHSA-2wh4-7p8q-3mh2 2026-09-28T23:14:50.640386+00:00

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numeric identifier, and access dashboard statistics to disclose bidder contact information, offer details, messages, verification tokens, and business data.