https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:31:27.024977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282932 EUVD-2026-282932 2026-10-07T15:31:27.026990+00:00 EUVD-2026-282932 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6447 fkie_cve-2024-6447 2026-10-07T15:31:27.027025+00:00

The FULL – Cliente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the license plan parameter in all versions up to, and including, 3.1.12 due to insufficient input sanitization and output escaping as well as missing authorization and capability checks on the related functions. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that will execute whenever an administrative user accesses wp-admin dashboard

 https://cve.radiocsirt.org/vuln/ghsa-7w5c-g3qv-vx8v GHSA-7w5c-g3qv-vx8v 2026-10-07T15:31:27.027063+00:00

The FULL – Cliente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the license plan parameter in all versions up to, and including, 3.1.12 due to insufficient input sanitization and output escaping as well as missing authorization and capability checks on the related functions. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that will execute whenever an administrative user accesses wp-admin dashboard