https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:20:21.597141+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285494 EUVD-2026-285494 2026-10-05T15:20:21.663505+00:00 EUVD-2026-285494 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9080 fkie_cve-2025-9080 2026-10-05T15:20:21.663574+00:00

The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-2m2f-pp9p-r7fq GHSA-2m2f-pp9p-r7fq 2026-10-05T15:20:21.663625+00:00

The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.4 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.