https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:33:20.931169+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-360036 EUVD-2026-360036 2026-10-08T11:33:20.934797+00:00 EUVD-2026-360036 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47983 fkie_cve-2021-47983 2026-10-08T11:33:20.934829+00:00

WordPress Plugin Stripe Payments before 2.0.40 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.

 https://cve.radiocsirt.org/vuln/ghsa-g9mx-rrvw-6m52 GHSA-g9mx-rrvw-6m52 2026-10-08T11:33:20.934860+00:00

WordPress Plugin Stripe Payments 2.0.39 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the AcceptStripePayments-settings[currency_code] parameter. Attackers can submit POST requests to /wp-admin/options.php with script payloads in the currency_code field to execute arbitrary JavaScript in administrator browsers when settings are viewed.