https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:21:12.199443+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-101715 cnvd-2021-101715 2026-10-03T15:21:12.266304+00:00 cnvd-2021-101715 https://cve.radiocsirt.org/vuln/euvd-2026-24081 EUVD-2026-24081 2026-10-03T15:21:12.266345+00:00 EUVD-2026-24081 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24705 fkie_cve-2021-24705 2026-10-03T15:21:12.266360+00:00

The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before outputting them in attributes. This could allow attackers to make a logged in admin edit arbitrary forms with Cross-Site Scripting payloads in them

 https://cve.radiocsirt.org/vuln/ghsa-5w27-mg8j-wjm2 GHSA-5w27-mg8j-wjm2 2026-10-03T15:21:12.266390+00:00

The NEX-Forms WordPress plugin through 7.9.4 does not escape some of its settings and form fields before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

 https://cve.radiocsirt.org/vuln/gsd-2021-24705 gsd-2021-24705 2026-10-03T15:21:12.266419+00:00 gsd-2021-24705