https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:07:47.022049+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-213399 EUVD-2026-213399 2026-10-05T17:07:47.086325+00:00 EUVD-2026-213399 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24982 fkie_cve-2025-24982 2026-10-05T17:07:47.086365+00:00

Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a malicious page while logged in, the log data may be deleted.

 https://cve.radiocsirt.org/vuln/ghsa-375m-8hf7-5q5g GHSA-375m-8hf7-5q5g 2026-10-05T17:07:47.086398+00:00

Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5. If a user views a malicious page while logged in, the log data may be deleted.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000009 jvndb-2025-000009 2026-10-05T17:07:47.086415+00:00

WordPress Plugin "Activity Log WinterLock" provided by SWIT contains a cross-site request forgery vulnerability (CWE-352). KENJI YOSHIKAWA reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.