https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:00:35.625825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-283262 EUVD-2026-283262 2026-10-05T13:00:35.686770+00:00 EUVD-2026-283262 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4974 fkie_cve-2022-4974 2026-10-05T13:00:35.686821+00:00

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-p5fp-r7v7-h5q7 GHSA-p5fp-r7v7-h5q7 2026-10-05T13:00:35.686875+00:00

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.