https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T05:18:40.529256+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341326 EUVD-2026-341326 2026-10-12T05:18:40.575572+00:00 EUVD-2026-341326 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14190 fkie_cve-2026-14190 2026-10-12T05:18:40.575607+00:00

The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.

 https://cve.radiocsirt.org/vuln/ghsa-j952-f3p9-h3jg GHSA-j952-f3p9-h3jg 2026-10-12T05:18:40.575640+00:00

The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.