https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:36:22.518629+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-34854 cnvd-2026-34854 2026-10-13T03:36:22.521643+00:00 cnvd-2026-34854 https://cve.radiocsirt.org/vuln/euvd-2026-339200 EUVD-2026-339200 2026-10-13T03:36:22.521678+00:00 EUVD-2026-339200 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11767 fkie_cve-2026-11767 2026-10-13T03:36:22.521693+00:00

The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in administrator views the form submissions.

 https://cve.radiocsirt.org/vuln/ghsa-9g9m-xxjx-jx22 GHSA-9g9m-xxjx-jx22 2026-10-13T03:36:22.521724+00:00

The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in administrator views the form submissions.