https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:35:37.399385+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-289093 EUVD-2026-289093 2026-10-06T15:35:37.445471+00:00 EUVD-2026-289093 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12818 fkie_cve-2024-12818 2026-10-06T15:35:37.445510+00:00

The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-wj5r-8563-f662 GHSA-wj5r-8563-f662 2026-10-06T15:35:37.445547+00:00

The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.