https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:04:42.661860+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-31557 cnvd-2022-31557 2026-10-04T23:04:42.724812+00:00 cnvd-2022-31557 https://cve.radiocsirt.org/vuln/euvd-2026-24443 EUVD-2026-24443 2026-10-04T23:04:42.724851+00:00 EUVD-2026-24443 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25060 fkie_cve-2021-25060 2026-10-04T23:04:42.724865+00:00

The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting issues

 https://cve.radiocsirt.org/vuln/ghsa-hj2f-j483-4hvv GHSA-hj2f-j483-4hvv 2026-10-04T23:04:42.724896+00:00

The Five Star Business Profile and Schema WordPress plugin before 2.1.7 does not have any authorisation and CSRF in its bpfwp_welcome_add_contact_page and bpfwp_welcome_set_contact_information AJAX action, allowing any authenticated users, such as subscribers, to call them. Furthermore, due to the lack of sanitisation, it also lead to Stored Cross-Site Scripting issues

 https://cve.radiocsirt.org/vuln/gsd-2021-25060 gsd-2021-25060 2026-10-04T23:04:42.724912+00:00 gsd-2021-25060