https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T16:09:17.132729+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331376 EUVD-2026-331376 2026-10-14T16:09:17.135014+00:00 EUVD-2026-331376 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11589 fkie_cve-2026-11589 2026-10-14T16:09:17.135044+00:00

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript (such as HTML or SVG) to a publicly accessible location, leading to Stored Cross-Site Scripting attacks against site users and administrators.

 https://cve.radiocsirt.org/vuln/ghsa-w4vj-qmqh-q69w GHSA-w4vj-qmqh-q69w 2026-10-14T16:09:17.135074+00:00

The WP Support Plus Responsive Ticket System WordPress plugin through 9.1.2 does not properly validate uploaded files, allowing unauthenticated users to upload files containing malicious JavaScript (such as HTML or SVG) to a publicly accessible location, leading to Stored Cross-Site Scripting attacks against site users and administrators.