https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T03:03:32.546408+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-2957 EUVD-2026-2957 2026-10-16T03:03:32.584217+00:00 EUVD-2026-2957 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5280 fkie_cve-2024-5280 2026-10-16T03:03:32.584251+00:00

The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make non-logged in users execute an XSS payload via a CSRF attack

 https://cve.radiocsirt.org/vuln/ghsa-7pxg-99jf-7vvf GHSA-7pxg-99jf-7vvf 2026-10-16T03:03:32.584283+00:00

The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make non-logged in users execute an XSS payload via a CSRF attack