https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:36:00.496455+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-10967 EUVD-2026-10967 2026-10-03T02:36:00.499450+00:00 EUVD-2026-10967 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0450 fkie_cve-2022-0450 2026-10-03T02:36:00.499489+00:00

The Menu Image, Icons made easy WordPress plugin before 3.0.6 does not have authorisation and CSRF checks when saving menu settings, and does not validate, sanitise and escape them. As a result, any authenticate users, such as subscriber can update the settings or arbitrary menu and put Cross-Site Scripting payloads in them which will be triggered in the related menu in the frontend

 https://cve.radiocsirt.org/vuln/ghsa-rwc4-w23c-gc77 GHSA-rwc4-w23c-gc77 2026-10-03T02:36:00.499539+00:00

The Menu Image, Icons made easy WordPress plugin before 3.0.8 does not have authorisation and CSRF checks when saving menu settings, and does not validate, sanitise and escape them. As a result, any authenticate users, such as subscriber can update the settings or arbitrary menu and put Cross-Site Scripting payloads in them which will be triggered in the related menu in the frontend

 https://cve.radiocsirt.org/vuln/gsd-2022-0450 gsd-2022-0450 2026-10-03T02:36:00.499565+00:00 gsd-2022-0450