https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:54:45.677447+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288658 EUVD-2026-288658 2026-10-06T05:54:45.748300+00:00 EUVD-2026-288658 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8606 fkie_cve-2025-8606 2026-10-06T05:54:45.748339+00:00

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activate_plugin and deactivate_plugin functions. This makes it possible for attackers to trick authenticated administrators into activating or deactivating specified plugins via a forged request, such as clicking on a malicious link or visiting a compromised page.

 https://cve.radiocsirt.org/vuln/ghsa-7h92-gq8q-gpxg GHSA-7h92-gq8q-gpxg 2026-10-06T05:54:45.748372+00:00

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less than, or equal to, 1.3.23. This is due to missing or incorrect nonce validation on the activate_plugin and deactivate_plugin functions. This makes it possible for attackers to trick authenticated administrators into activating or deactivating specified plugins via a forged request, such as clicking on a malicious link or visiting a compromised page.