https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T19:44:27.195423+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285321 EUVD-2026-285321 2026-10-05T19:44:27.197867+00:00 EUVD-2026-285321 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1155 fkie_cve-2023-1155 2026-10-05T19:44:27.197905+00:00

The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_icon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-62ff-83h9-g6px GHSA-62ff-83h9-g6px 2026-10-05T19:44:27.197939+00:00

The Cost Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the nd_cc_meta_box_cc_price_icon parameter in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/gsd-2023-1155 gsd-2023-1155 2026-10-05T19:44:27.197957+00:00 gsd-2023-1155