https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:38:03.164117+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-03960 cnvd-2018-03960 2026-10-05T23:38:03.169567+00:00 cnvd-2018-03960 https://cve.radiocsirt.org/vuln/euvd-2026-170093 EUVD-2026-170093 2026-10-05T23:38:03.169604+00:00 EUVD-2026-170093 https://cve.radiocsirt.org/vuln/fkie_cve-2018-6357 fkie_cve-2018-6357 2026-10-05T23:38:03.169618+00:00

The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widget_icon_array_order XSS.

 https://cve.radiocsirt.org/vuln/ghsa-7v6m-79qx-mc6q GHSA-7v6m-79qx-mc6q 2026-10-05T23:38:03.169647+00:00

The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widget_icon_array_order XSS.

 https://cve.radiocsirt.org/vuln/gsd-2018-6357 gsd-2018-6357 2026-10-05T23:38:03.169662+00:00 gsd-2018-6357