https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:09:00.844451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351251 EUVD-2026-351251 2026-10-08T10:09:00.893816+00:00 EUVD-2026-351251 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17011 fkie_cve-2026-17011 2026-10-08T10:09:00.893855+00:00

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.

 https://cve.radiocsirt.org/vuln/ghsa-gf2c-5g46-3crp GHSA-gf2c-5g46-3crp 2026-10-08T10:09:00.893897+00:00

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.