https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:58:04.338458+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-240261 EUVD-2026-240261 2026-10-08T18:58:04.340390+00:00 EUVD-2026-240261 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10076 fkie_cve-2024-10076 2026-10-08T18:58:04.340423+00:00

The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn’t, ultimately making it possible for contributor and above users to perform Stored XSS attacks

 https://cve.radiocsirt.org/vuln/ghsa-wj5c-qqg6-p7qc GHSA-wj5c-qqg6-p7qc 2026-10-08T18:58:04.340456+00:00

The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn’t, ultimately making it possible for contributor and above users to perform Stored XSS attacks