https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T19:45:37.593113+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-211099 EUVD-2026-211099 2026-10-27T19:45:37.596270+00:00 EUVD-2026-211099 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27925 fkie_cve-2023-27925 2026-10-27T19:45:37.596306+00:00

Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/ghsa-6q2c-9f56-3h2c GHSA-6q2c-9f56-3h2c 2026-10-27T19:45:37.596337+00:00

Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/gsd-2023-27925 gsd-2023-27925 2026-10-27T19:45:37.596353+00:00 gsd-2023-27925 https://cve.radiocsirt.org/vuln/jvndb-2023-000045 jvndb-2023-000045 2026-10-27T19:45:37.596364+00:00

WordPress Plugin "VK Blocks" and "VK All in One Expansion Unit" provided by Vektor,Inc. contain multiple cross-site scripting vulnerabilities (CWE-79) listed below.<ul><li>Cross-site scripting vulnerability in Tag edit function - CVE-2023-27923</li><li>Cross-site scripting vulnerability in Post function - CVE-2023-27925</li><li>Cross-site scripting vulnerability in Profile setting function - CVE-2023-27926</li><li>Cross-site scripting vulnerability in CTA post function - CVE-2023-28367</li></ul>apple502j reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.