https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:01:15.988815+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-125473 EUVD-2026-125473 2026-10-02T18:01:15.992453+00:00 EUVD-2026-125473 https://cve.radiocsirt.org/vuln/fkie_cve-2008-0164 fkie_cve-2008-0164 2026-10-02T18:01:15.992482+00:00

Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page.

 https://cve.radiocsirt.org/vuln/ghsa-4j3w-g62x-hrcp GHSA-4j3w-g62x-hrcp — Plone Cross-site request forgery (CSRF) 2026-10-02T18:01:15.992512+00:00

Affected: PyPI: Plone

Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS before 3.1 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page.

 https://cve.radiocsirt.org/vuln/gsd-2008-0164 gsd-2008-0164 2026-10-02T18:01:15.992536+00:00 gsd-2008-0164 https://cve.radiocsirt.org/vuln/pysec-2008-14 PYSEC-2008-14 2026-10-02T18:01:15.992548+00:00

Affected: PyPI: plone

Multiple cross-site request forgery (CSRF) vulnerabilities in Plone CMS 3.0.5 and 3.0.6 allow remote attackers to (1) add arbitrary accounts via the join_form page and (2) change the privileges of arbitrary groups via the prefs_groups_overview page.