https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:07:17.154454+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348692 EUVD-2026-348692 2026-10-07T02:07:17.156314+00:00 EUVD-2026-348692 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14596 fkie_cve-2026-14596 2026-10-07T02:07:17.156346+00:00

The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the base of the password-reset link it emails, allowing unauthenticated attackers to send a target user a legitimately-formatted reset email whose link points to an attacker-controlled host and carries a valid reset key, leading to account takeover when the victim clicks it.

 https://cve.radiocsirt.org/vuln/ghsa-wrwc-chj8-j397 GHSA-wrwc-chj8-j397 2026-10-07T02:07:17.156378+00:00

The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the base of the password-reset link it emails, allowing unauthenticated attackers to send a target user a legitimately-formatted reset email whose link points to an attacker-controlled host and carries a valid reset key, leading to account takeover when the victim clicks it.