https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:31:58.544361+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-344182 EUVD-2026-344182 2026-10-08T10:31:58.591818+00:00 EUVD-2026-344182 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16068 fkie_cve-2026-16068 2026-10-08T10:31:58.591859+00:00

The Brizy WordPress plugin before 2.8.19 does not properly restrict who can modify its site-global design data and does not sanitise part of that data before outputting it, allowing authenticated users with Author-level access and above to store arbitrary JavaScript that is then served unsanitised on the site's front-end pages and executes in the browser of every visitor, including administrators.

 https://cve.radiocsirt.org/vuln/ghsa-3qrh-q76v-gc9c GHSA-3qrh-q76v-gc9c 2026-10-08T10:31:58.591896+00:00

The Brizy WordPress plugin before 2.8.19 does not properly restrict who can modify its site-global design data and does not sanitise part of that data before outputting it, allowing authenticated users with Author-level access and above to store arbitrary JavaScript that is then served unsanitised on the site's front-end pages and executes in the browser of every visitor, including administrators.