https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:53:35.199413+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-57433 cnvd-2022-57433 2026-10-07T09:53:35.202626+00:00 cnvd-2022-57433 https://cve.radiocsirt.org/vuln/euvd-2026-11659 EUVD-2026-11659 2026-10-07T09:53:35.202662+00:00 EUVD-2026-11659 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1386 fkie_cve-2022-1386 2026-10-07T09:53:35.202677+00:00

The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the server's local network bypassing firewalls and access control measures.

 https://cve.radiocsirt.org/vuln/ghsa-4gm2-r6xm-jqxh GHSA-4gm2-r6xm-jqxh 2026-10-07T09:53:35.202708+00:00

The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the server's local network bypassing firewalls and access control measures.

 https://cve.radiocsirt.org/vuln/gsd-2022-1386 gsd-2022-1386 2026-10-07T09:53:35.202726+00:00 gsd-2022-1386