https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:00:13.569174+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-48179 cnvd-2022-48179 2026-10-03T10:00:13.633006+00:00 cnvd-2022-48179 https://cve.radiocsirt.org/vuln/euvd-2026-11528 EUVD-2026-11528 2026-10-03T10:00:13.633046+00:00 EUVD-2026-11528 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1203 fkie_cve-2022-1203 2026-10-03T10:00:13.633061+00:00

The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a result, any authenticated user, such as subscriber could modify arbitrary blog options

 https://cve.radiocsirt.org/vuln/ghsa-q5pj-mjjc-c94j GHSA-q5pj-mjjc-c94j 2026-10-03T10:00:13.633092+00:00

The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a result, any authenticated user, such as subscriber could modify arbitrary blog options

 https://cve.radiocsirt.org/vuln/gsd-2022-1203 gsd-2022-1203 2026-10-03T10:00:13.633109+00:00 gsd-2022-1203