https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:31:28.872701+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225450 EUVD-2026-225450 2026-10-07T02:31:28.918502+00:00 EUVD-2026-225450 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13146 fkie_cve-2024-13146 2026-10-07T02:31:28.918541+00:00

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack

 https://cve.radiocsirt.org/vuln/ghsa-xpv6-mc85-j28m GHSA-xpv6-mc85-j28m 2026-10-07T02:31:28.918574+00:00

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack