https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:42:59.280928+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-59589 cnvd-2021-59589 2026-10-03T23:42:59.285303+00:00 cnvd-2021-59589 https://cve.radiocsirt.org/vuln/euvd-2026-23855 EUVD-2026-23855 2026-10-03T23:42:59.285365+00:00 EUVD-2026-23855 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24436 fkie_cve-2021-24436 2026-10-03T23:42:59.285385+00:00

The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions dashboard, which is output in an attribute without being escaped first. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user's web browser, which could lead to full site compromise.

 https://cve.radiocsirt.org/vuln/ghsa-8qcc-x8gh-5483 GHSA-8qcc-x8gh-5483 2026-10-03T23:42:59.285428+00:00

The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions dashboard, which is output in an attribute without being escaped first. This could allow an attacker, who can convince an authenticated admin into clicking a link, to run malicious JavaScript within the user's web browser, which could lead to full site compromise.

 https://cve.radiocsirt.org/vuln/gsd-2021-24436 gsd-2021-24436 2026-10-03T23:42:59.285454+00:00 gsd-2021-24436