https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T03:21:56.125962+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-41810 cnvd-2022-41810 2026-10-09T03:21:56.207061+00:00 cnvd-2022-41810 https://cve.radiocsirt.org/vuln/euvd-2026-15390 EUVD-2026-15390 2026-10-09T03:21:56.207098+00:00 EUVD-2026-15390 https://cve.radiocsirt.org/vuln/fkie_cve-2022-27629 fkie_cve-2022-27629 2026-10-09T03:21:56.207112+00:00

Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-pgwv-6cjg-6qr4 GHSA-pgwv-6cjg-6qr4 2026-10-09T03:21:56.207143+00:00

Cross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership' versions prior to 1.9.6 allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2022-27629 gsd-2022-27629 2026-10-09T03:21:56.207160+00:00 gsd-2022-27629 https://cve.radiocsirt.org/vuln/jvndb-2022-000026 jvndb-2022-000026 2026-10-09T03:21:56.207171+00:00

WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" provided by VideoWhisper contains a cross-site request forgery vulnerability (CWE-352). Kosuke Sakai reported and coordinated with the developer to fix this vulnerability. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership. This JVN publication was delayed to 2022/4/15 after the developer's fix was published.