https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T19:16:55.400114+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-222416 EUVD-2026-222416 2026-10-22T19:16:55.408286+00:00 EUVD-2026-222416 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25572 fkie_cve-2024-25572 2026-10-22T19:16:55.408338+00:00

Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.

 https://cve.radiocsirt.org/vuln/ghsa-p777-v2c9-7gxq GHSA-p777-v2c9-7gxq 2026-10-22T19:16:55.408387+00:00

Cross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a website administrator views a malicious page while logging in, unintended operations may be performed.

 https://cve.radiocsirt.org/vuln/gsd-2024-25572 gsd-2024-25572 2026-10-22T19:16:55.408416+00:00 gsd-2024-25572 https://cve.radiocsirt.org/vuln/jvndb-2024-000038 jvndb-2024-000038 2026-10-22T19:16:55.408435+00:00

WordPress Plugin "Ninja Forms" provided by Saturday Drive contains multiple vulnerabilities listed below. * Cross-site request forgery (CWE-352) - CVE-2024-25572 * Stored cross-site scripting in submit processing (CWE-79) - CVE-2024-26019 * Stored cross-site scripting in custom fields for labels (CWE-79) - CVE-2024-29220 CVE-2024-25572 Kohei Agena reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-26019, CVE-2024-29220 Ryotaro Imamura of SB Technology Corp. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.