Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:47:13 +0000 CVE-2026-87839 — Tripzzy < 1.5.1 - Unauthenticated Arbitrary Comment Deletion https://vulnerability.circl.lu/vuln/cve-2026-87839 <p><strong>Affected:</strong> Unknown Tripzzy</p> <p>The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unauthenticated users, allowing them to permanently delete arbitrary comments on the site.</p> <p><strong>Affected:</strong> Unknown Tripzzy</p> <p>The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unauthenticated users, allowing them to permanently delete arbitrary comments on the site.</p> https://vulnerability.circl.lu/vuln/cve-2026-87839