https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T04:05:36.653998+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-93548 fkie_cve-2026-93548 2026-10-10T04:05:36.655922+00:00

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in that user's account details being exposed and their account being taken over.

 https://vulnerability.circl.lu/vuln/ghsa-84fg-vq45-2j4v GHSA-84fg-vq45-2j4v 2026-10-10T04:05:36.656016+00:00

The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have the FooSales WordPress plugin before 1.43.3 act as an arbitrary other user, including an administrator, resulting in that user's account details being exposed and their account being taken over.