https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:33:29.004574+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224746 EUVD-2026-224746 2026-10-17T15:33:29.053490+00:00 EUVD-2026-224746 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2319 fkie_cve-2025-2319 2026-10-17T15:33:29.053528+00:00

The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.11.13 to 5.25.08. This is due to missing or incorrect nonce validation on the 'ELISQLREPORTS_menu' function. This makes it possible for unauthenticated attackers to execute code on the server via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Version 5.25.10 adds a nonce check, which makes this vulnerability exploitable by admins only.

 https://cve.radiocsirt.org/vuln/ghsa-g2h3-qrp9-2x4p GHSA-g2h3-qrp9-2x4p 2026-10-17T15:33:29.053566+00:00

The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.11.13 to 5.25.08. This is due to missing or incorrect nonce validation on the 'ELISQLREPORTS_menu' function. This makes it possible for unauthenticated attackers to execute code on the server via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Version 5.25.10 adds a nonce check, which makes this vulnerability exploitable by admins only.