https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T06:00:41.013111+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-06640 cnvd-2016-06640 2026-10-18T06:00:41.016485+00:00 cnvd-2016-06640 https://cve.radiocsirt.org/vuln/euvd-2026-86255 EUVD-2026-86255 2026-10-18T06:00:41.016525+00:00 EUVD-2026-86255 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6897 fkie_cve-2016-6897 2026-10-18T06:00:41.016540+00:00

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896.

 https://cve.radiocsirt.org/vuln/ghsa-rxch-vxwr-47jw GHSA-rxch-vxwr-47jw 2026-10-18T06:00:41.016568+00:00

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896.

 https://cve.radiocsirt.org/vuln/gsd-2016-6897 gsd-2016-6897 2026-10-18T06:00:41.016585+00:00 gsd-2016-6897 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-6897 UBUNTU-CVE-2016-6897 2026-10-18T06:00:41.016596+00:00

Affected: Ubuntu:16.04:LTS: wordpress

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijack the authentication of subscribers for /dev/random read operations by leveraging a late call to the check_ajax_referer function, a related issue to CVE-2016-6896.