https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T14:10:33.354811+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-00616 cnvd-2022-00616 2026-10-07T14:10:33.358057+00:00 cnvd-2022-00616 https://cve.radiocsirt.org/vuln/euvd-2026-24311 EUVD-2026-24311 2026-10-07T14:10:33.358099+00:00 EUVD-2026-24311 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24915 fkie_cve-2021-24915 2026-10-07T14:10:33.358131+00:00

The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address

 https://cve.radiocsirt.org/vuln/ghsa-986q-37xh-j7h2 GHSA-986q-37xh-j7h2 2026-10-07T14:10:33.358177+00:00

The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address

 https://cve.radiocsirt.org/vuln/gsd-2021-24915 gsd-2021-24915 2026-10-07T14:10:33.358208+00:00 gsd-2021-24915