https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T16:09:04.249674+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-41280 cnvd-2022-41280 2026-10-22T16:09:04.253292+00:00 cnvd-2022-41280 https://cve.radiocsirt.org/vuln/euvd-2026-11125 EUVD-2026-11125 2026-10-22T16:09:04.253335+00:00 EUVD-2026-11125 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0661 fkie_cve-2022-0661 2026-10-22T16:09:04.253367+00:00

The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disallowed, leading to a stored cross-site scripting (XSS) vulnerability. Further it is also possible to inject PHP code, leading to a Remote Code execution (RCE) vulnerability, even if the DISALLOW_FILE_EDIT and DISALLOW_FILE_MOD constants are both set.

 https://cve.radiocsirt.org/vuln/ghsa-g5jf-j433-qxmq GHSA-g5jf-j433-qxmq 2026-10-22T16:09:04.253445+00:00

The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disallowed, leading to a stored cross-site scripting (XSS) vulnerability. Further it is also possible to inject PHP code, leading to a Remote Code execution (RCE) vulnerability, even if the DISALLOW_FILE_EDIT and DISALLOW_FILE_MOD constants are both set.

 https://cve.radiocsirt.org/vuln/gsd-2022-0661 gsd-2022-0661 2026-10-22T16:09:04.253474+00:00 gsd-2022-0661