https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:27:12.417254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2023-32826 cnvd-2023-32826 2026-10-05T16:27:12.420359+00:00 cnvd-2023-32826 https://cve.radiocsirt.org/vuln/euvd-2026-238742 EUVD-2026-238742 2026-10-05T16:27:12.420400+00:00 EUVD-2026-238742 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3247 fkie_cve-2022-3247 2026-10-05T16:27:12.420416+00:00

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJAX action, and does not ensure that the URL to make a request to is an external one. As a result, any authenticated users, such as subscriber could perform SSRF attacks

 https://cve.radiocsirt.org/vuln/ghsa-q28w-jq68-2wfw GHSA-q28w-jq68-2wfw 2026-10-05T16:27:12.420449+00:00

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJAX action, and does not ensure that the URL to make a request to is an external one. As a result, any authenticated users, such as subscriber could perform SSRF attacks

 https://cve.radiocsirt.org/vuln/gsd-2022-3247 gsd-2022-3247 2026-10-05T16:27:12.420466+00:00 gsd-2022-3247