https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:41:41.886741+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-13236 EUVD-2026-13236 2026-10-07T16:41:41.891140+00:00 EUVD-2026-13236 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21179 fkie_cve-2022-21179 2026-10-07T16:41:41.891190+00:00

Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.

 https://cve.radiocsirt.org/vuln/ghsa-qjhc-3x8q-q3vv GHSA-qjhc-3x8q-q3vv 2026-10-07T16:41:41.891260+00:00

Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.

 https://cve.radiocsirt.org/vuln/gsd-2022-21179 gsd-2022-21179 2026-10-07T16:41:41.891298+00:00 gsd-2022-21179 https://cve.radiocsirt.org/vuln/jvndb-2022-000013 jvndb-2022-000013 2026-10-07T16:41:41.891318+00:00

EC-CUBE plugin "Mail Magazine Management Plugin" provided by EC-CUBE CO.,LTD. contains a cross-site request forgery vulnerability (CWE-352). Kenta Yamamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.