https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:20:15.707348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285737 EUVD-2026-285737 2026-10-08T00:20:15.709889+00:00 EUVD-2026-285737 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5411 fkie_cve-2023-5411 2026-10-08T00:20:15.709930+00:00

The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_save_post function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to modify certain post values. Note that the extent of modification is limited due to fixed values passed to the wp_update_post function.

 https://cve.radiocsirt.org/vuln/ghsa-4c25-gwp9-9c2h GHSA-4c25-gwp9-9c2h 2026-10-08T00:20:15.709978+00:00

The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_save_post function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to modify certain post values. Note that the extent of modification is limited due to fixed values passed to the wp_update_post function.

 https://cve.radiocsirt.org/vuln/gsd-2023-5411 gsd-2023-5411 2026-10-08T00:20:15.710010+00:00 gsd-2023-5411