https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:40:42.128450+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225137 EUVD-2026-225137 2026-10-07T01:40:42.212446+00:00 EUVD-2026-225137 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0143 fkie_cve-2023-0143 2026-10-07T01:40:42.212498+00:00

The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

 https://cve.radiocsirt.org/vuln/ghsa-8379-j3pg-g4h6 GHSA-8379-j3pg-g4h6 2026-10-07T01:40:42.212534+00:00

The Send PDF for Contact Form 7 WordPress plugin before 0.9.9.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

 https://cve.radiocsirt.org/vuln/gsd-2023-0143 gsd-2023-0143 2026-10-07T01:40:42.212553+00:00 gsd-2023-0143