https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T19:45:35.718244+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-211098 EUVD-2026-211098 2026-10-27T19:45:35.721108+00:00 EUVD-2026-211098 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27923 fkie_cve-2023-27923 2026-10-27T19:45:35.721138+00:00

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/ghsa-47m3-mrjf-h78g GHSA-47m3-mrjf-h78g 2026-10-27T19:45:35.721167+00:00

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/gsd-2023-27923 gsd-2023-27923 2026-10-27T19:45:35.721184+00:00 gsd-2023-27923 https://cve.radiocsirt.org/vuln/jvndb-2023-000045 jvndb-2023-000045 2026-10-27T19:45:35.721195+00:00

WordPress Plugin "VK Blocks" and "VK All in One Expansion Unit" provided by Vektor,Inc. contain multiple cross-site scripting vulnerabilities (CWE-79) listed below.<ul><li>Cross-site scripting vulnerability in Tag edit function - CVE-2023-27923</li><li>Cross-site scripting vulnerability in Post function - CVE-2023-27925</li><li>Cross-site scripting vulnerability in Profile setting function - CVE-2023-27926</li><li>Cross-site scripting vulnerability in CTA post function - CVE-2023-28367</li></ul>apple502j reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.