https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:39:55.897512+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-3240 EUVD-2026-3240 2026-10-05T12:39:55.944524+00:00 EUVD-2026-3240 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6072 fkie_cve-2024-6072 2026-10-05T12:39:55.944561+00:00

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

 https://cve.radiocsirt.org/vuln/ghsa-xhc8-4cg9-pfch GHSA-xhc8-4cg9-pfch 2026-10-05T12:39:55.944593+00:00

The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers