https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:53:24.066925+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-18723 cnvd-2025-18723 2026-10-06T23:53:24.070293+00:00 cnvd-2025-18723 https://cve.radiocsirt.org/vuln/euvd-2026-249348 EUVD-2026-249348 2026-10-06T23:53:24.070326+00:00 EUVD-2026-249348 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54940 fkie_cve-2025-54940 2026-10-06T23:53:24.070340+00:00

An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may be rendered and page display may be tampered.

 https://cve.radiocsirt.org/vuln/ghsa-ww7q-fq8q-pm4x GHSA-ww7q-fq8q-pm4x 2026-10-06T23:53:24.070368+00:00

An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may be rendered and page display may be tampered.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000058 jvndb-2025-000058 2026-10-06T23:53:24.070384+00:00

Advanced Custom Fields provided by WPEngine, Inc. contains the following vulnerability. <ul><li>HTML injection (WE-94) - CVE-2025-54940</li></ul> Shogo Kumamaru of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.