https://cve.radiocsirt.org/cna-root/mitre/recent Most recent vulnerabilities from the mitre CNA root 2026-10-02T07:10:16.065479+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Latest vulnerabilities published by the CNAs operating under the mitre root of the CVE Program. https://cve.radiocsirt.org/vuln/cve-2026-97318 CVE-2026-97318 (WPScan) 2026-10-02T06:00:27.170000+00:00 Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter 2026-10-02T06:00:27.170000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-97317 CVE-2026-97317 (WPScan) 2026-10-02T06:00:26.940000+00:00 Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure via Giveaway Page Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure via Giveaway Page 2026-10-02T06:00:26.940000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-94298 CVE-2026-94298 (WPScan) 2026-10-02T06:00:26.412000+00:00 BuildKit < 1.0.29 - Contributor+ Stored SQLi via list_content Parameter BuildKit < 1.0.29 - Contributor+ Stored SQLi via list_content Parameter 2026-10-02T06:00:26.412000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-91023 CVE-2026-91023 (WPScan) 2026-10-02T06:00:25.876000+00:00 Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured Motors – Car Dealership & Classified Listings < 1.4.124 - Subscriber+ Cross-User Post Meta Modification via stm_make_featured 2026-10-02T06:00:25.876000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-91022 CVE-2026-91022 (WPScan) 2026-10-02T06:00:25.652000+00:00 Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color Motors < 1.4.124 - Listing Manager+ Stored XSS via Badge Color 2026-10-02T06:00:25.652000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-85016 CVE-2026-85016 (WPScan) 2026-10-02T06:00:25.438000+00:00 Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter 2026-10-02T06:00:25.438000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-91828 CVE-2026-91828 (WPScan) 2026-10-02T06:00:25.216000+00:00 OMGF < 6.3.11 - Unauthenticated DoS via do_optimize OMGF < 6.3.11 - Unauthenticated DoS via do_optimize 2026-10-02T06:00:25.216000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-13718 CVE-2026-13718 (WPScan) 2026-10-02T06:00:24.997000+00:00 Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content 2026-10-02T06:00:24.997000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-90988 CVE-2026-90988 (WPScan) 2026-10-02T06:00:24.780000+00:00 Request a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenum Request a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenum 2026-10-02T06:00:24.780000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-85004 CVE-2026-85004 (WPScan) 2026-10-02T06:00:24.239000+00:00 Popup Maker WP <= 1.4.5 - Subscriber+ Missing Authorization via sgpm_connect Popup Maker WP <= 1.4.5 - Subscriber+ Missing Authorization via sgpm_connect 2026-10-02T06:00:24.239000+00:00