https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T05:39:00.357073+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-7363 EUVD-2026-7363 2026-10-08T05:39:00.361656+00:00 EUVD-2026-7363 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4798 fkie_cve-2023-4798 2026-10-08T05:39:00.361690+00:00

The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like contributors to conduct Stored XSS attacks.

 https://cve.radiocsirt.org/vuln/ghsa-cv5w-p79v-vvxq GHSA-cv5w-p79v-vvxq 2026-10-08T05:39:00.361721+00:00

The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like contributors to conduct Stored XSS attacks.

 https://cve.radiocsirt.org/vuln/gsd-2023-4798 gsd-2023-4798 2026-10-08T05:39:00.361737+00:00 gsd-2023-4798