https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:23:46.515576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287611 EUVD-2026-287611 2026-10-06T14:23:46.571911+00:00 EUVD-2026-287611 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8481 fkie_cve-2025-8481 2026-10-06T14:23:46.571947+00:00

The Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.1.7. This is due to missing or incorrect nonce validation on the bdfe_install_activate_rswpbs_only function. This makes it possible for unauthenticated attackers to install the 'rs-wp-books-showcase' plugin via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

 https://cve.radiocsirt.org/vuln/ghsa-j2m5-7mfc-pj5x GHSA-j2m5-7mfc-pj5x 2026-10-06T14:23:46.571983+00:00

The Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.1.7. This is due to missing or incorrect nonce validation on the bdfe_install_activate_rswpbs_only function. This makes it possible for unauthenticated attackers to install the 'rs-wp-books-showcase' plugin via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.