https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:29:09.917877+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-23517 cnvd-2022-23517 2026-10-04T16:29:09.921022+00:00 cnvd-2022-23517 https://cve.radiocsirt.org/vuln/euvd-2026-24042 EUVD-2026-24042 2026-10-04T16:29:09.921055+00:00 EUVD-2026-24042 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24654 fkie_cve-2021-24654 2026-10-04T16:29:09.921070+00:00

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attacks when their profile is viewed

 https://cve.radiocsirt.org/vuln/ghsa-f9cp-vx85-2fm6 GHSA-f9cp-vx85-2fm6 2026-10-04T16:29:09.921099+00:00

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attacks when their profile is viewed

 https://cve.radiocsirt.org/vuln/gsd-2021-24654 gsd-2021-24654 2026-10-04T16:29:09.921114+00:00 gsd-2021-24654