https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:08:32.252745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-01033 cnvd-2015-01033 2026-10-04T10:08:32.257191+00:00 cnvd-2015-01033 https://cve.radiocsirt.org/vuln/euvd-2026-90309 EUVD-2026-90309 2026-10-04T10:08:32.257272+00:00 EUVD-2026-90309 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1494 fkie_cve-2015-1494 2026-10-04T10:08:32.257296+00:00

The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an mfbfw[*] parameter in an update action to wp-admin/admin-post.php, as demonstrated by the mfbfw[padding] parameter and exploited in the wild in February 2015.

 https://cve.radiocsirt.org/vuln/ghsa-44cc-c4hq-r7vv GHSA-44cc-c4hq-r7vv 2026-10-04T10:08:32.257341+00:00

The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an mfbfw[*] parameter in an update action to wp-admin/admin-post.php, as demonstrated by the mfbfw[padding] parameter and exploited in the wild in February 2015.

 https://cve.radiocsirt.org/vuln/gsd-2015-1494 gsd-2015-1494 2026-10-04T10:08:32.257367+00:00 gsd-2015-1494