https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:18:11.629261+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-16369 cnvd-2025-16369 2026-10-10T08:18:11.682469+00:00 cnvd-2025-16369 https://cve.radiocsirt.org/vuln/euvd-2026-289216 EUVD-2026-289216 2026-10-10T08:18:11.682508+00:00 EUVD-2026-289216 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6716 fkie_cve-2025-6716 2026-10-10T08:18:11.682523+00:00

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'upload[1][title]' parameter in all versions up to, and including, 26.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-2hfc-4pwf-c6m2 GHSA-2hfc-4pwf-c6m2 2026-10-10T08:18:11.682559+00:00

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'upload[1][title]' parameter in all versions up to, and including, 26.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.