https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T02:31:28.409310+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-15187 EUVD-2026-15187 2026-10-18T02:31:28.413209+00:00 EUVD-2026-15187 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27174 fkie_cve-2022-27174 2026-10-18T02:31:28.413253+00:00

Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.

 https://cve.radiocsirt.org/vuln/ghsa-v77w-mgq7-vjj2 GHSA-v77w-mgq7-vjj2 2026-10-18T02:31:28.413294+00:00

Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.

 https://cve.radiocsirt.org/vuln/gsd-2022-27174 gsd-2022-27174 2026-10-18T02:31:28.413320+00:00 gsd-2022-27174 https://cve.radiocsirt.org/vuln/jvndb-2022-000034 jvndb-2022-000034 2026-10-18T02:31:28.413339+00:00

EC-CUBE plugin "Easy Blog for EC-CUBE4" provided by COREMOBILE Co. Ltd. contains a cross-site request forgery vulnerability (CWE-352). Furukawa Natsumi of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.