https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T16:36:28.377030+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-55732 cnvd-2022-55732 2026-10-17T16:36:28.380908+00:00 cnvd-2022-55732 https://cve.radiocsirt.org/vuln/euvd-2026-11950 EUVD-2026-11950 2026-10-17T16:36:28.380950+00:00 EUVD-2026-11950 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1772 fkie_cve-2022-1772 2026-10-17T16:36:28.380977+00:00

The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing the booby-trapped payload and taking over their account.

 https://cve.radiocsirt.org/vuln/ghsa-46qc-38mx-3p32 GHSA-46qc-38mx-3p32 2026-10-17T16:36:28.381026+00:00

The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing the booby-trapped payload and taking over their account.

 https://cve.radiocsirt.org/vuln/gsd-2022-1772 gsd-2022-1772 2026-10-17T16:36:28.381066+00:00 gsd-2022-1772