https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T03:43:08.860008+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-87839 CVE-2026-87839 — Tripzzy < 1.5.1 - Unauthenticated Arbitrary Comment Deletion 2026-10-05T03:43:08.874779+00:00

Affected: Unknown Tripzzy

The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unauthenticated users, allowing them to permanently delete arbitrary comments on the site.