https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T18:17:12.920895+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285689 EUVD-2026-285689 2026-10-22T18:17:12.923579+00:00 EUVD-2026-285689 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13856 fkie_cve-2024-13856 2026-10-22T18:17:12.923615+00:00

The Your Friendly Drag and Drop Page Builder — Make Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.10 via the make_builder_ajax_subscribe() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

 https://cve.radiocsirt.org/vuln/ghsa-wphx-mjpf-39xm GHSA-wphx-mjpf-39xm 2026-10-22T18:17:12.923663+00:00

The Your Friendly Drag and Drop Page Builder — Make Builder plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.10 via the make_builder_ajax_subscribe() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.