https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T03:42:40.149570+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285404 EUVD-2026-285404 2026-10-09T03:42:40.202049+00:00 EUVD-2026-285404 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14163 fkie_cve-2025-14163 2026-10-09T03:42:40.202094+00:00

The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.11.53. This is due to missing nonce validation in the 'insert_inner_template' function. This makes it possible for unauthenticated attackers to create arbitrary Elementor templates via a forged request granted they can trick a site administrator or other user with the edit_posts capability into performing an action such as clicking on a link.

 https://cve.radiocsirt.org/vuln/ghsa-45r7-58v5-hc44 GHSA-45r7-58v5-hc44 2026-10-09T03:42:40.202132+00:00

The Premium Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.11.53. This is due to missing nonce validation in the 'insert_inner_template' function. This makes it possible for unauthenticated attackers to create arbitrary Elementor templates via a forged request granted they can trick a site administrator or other user with the edit_posts capability into performing an action such as clicking on a link.