https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:11:15.417929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-23979 EUVD-2026-23979 2026-10-08T08:11:15.420440+00:00 EUVD-2026-23979 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24584 fkie_cve-2021-24584 2026-10-08T08:11:15.420473+00:00

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_posts capability (contributor+) to update arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such attack to be perform via CSRF against a logged in with such capability. In versions before 2.3.19, the lack of sanitisation and escaping in some of the fields, like the descritption could also lead to Stored XSS issues

 https://cve.radiocsirt.org/vuln/ghsa-2v92-7cf3-4vm5 GHSA-2v92-7cf3-4vm5 2026-10-08T08:11:15.420506+00:00

The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any user with the edit_posts capability (contributor+) to update arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such attack to be perform via CSRF against a logged in with such capability. In versions before 2.3.19, the lack of sanitisation and escaping in some of the fields, like the descritption could also lead to Stored XSS issues

 https://cve.radiocsirt.org/vuln/gsd-2021-24584 gsd-2021-24584 2026-10-08T08:11:15.420525+00:00 gsd-2021-24584