https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:07:34.536431+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348906 EUVD-2026-348906 2026-10-02T12:07:34.592444+00:00 EUVD-2026-348906 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0673 fkie_cve-2026-0673 2026-10-02T12:07:34.592477+00:00

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the `element_pack_contact_form` AJAX action. This is due to insufficient sanitization of newline characters in user-supplied input that gets concatenated into email headers. This makes it possible for unauthenticated attackers to inject arbitrary email headers into emails sent by the contact form.

 https://cve.radiocsirt.org/vuln/ghsa-74gv-xjcv-gwc2 GHSA-74gv-xjcv-gwc2 2026-10-02T12:07:34.592509+00:00

The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the `element_pack_contact_form` AJAX action. This is due to insufficient sanitization of newline characters in user-supplied input that gets concatenated into email headers. This makes it possible for unauthenticated attackers to inject arbitrary email headers into emails sent by the contact form.