https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:09:11.409985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-192769 EUVD-2026-192769 2026-10-04T04:09:11.522424+00:00 EUVD-2026-192769 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40068 fkie_cve-2023-40068 2026-10-04T04:09:11.522478+00:00

Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product with the administrative privilege.

 https://cve.radiocsirt.org/vuln/ghsa-87x7-f7g8-6px2 GHSA-87x7-f7g8-6px2 2026-10-04T04:09:11.522529+00:00

Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product with the administrative privilege.

 https://cve.radiocsirt.org/vuln/gsd-2023-40068 gsd-2023-40068 2026-10-04T04:09:11.522557+00:00 gsd-2023-40068 https://cve.radiocsirt.org/vuln/jvndb-2023-000084 jvndb-2023-000084 2026-10-04T04:09:11.522575+00:00

WordPress Plugin "Advanced Custom Fields" provided by WP Engine contains a cross-site scripting vulnerability (CWE-79). Ryotaro Imamura of SB Technology Corp. and Satoo Nakano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.