https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:12:19.968504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372906 EUVD-2026-372906 2026-10-06T00:12:20.031439+00:00 EUVD-2026-372906 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85113 fkie_cve-2026-85113 2026-10-06T00:12:20.031484+00:00

The GiveWP WordPress plugin before 4.16.9 does not remove shortcode delimiters from donor-supplied values before rendering them on public pages, and the shortcode stripping it applies can be defeated by nesting, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.

 https://cve.radiocsirt.org/vuln/ghsa-4grg-xfv8-q8cj GHSA-4grg-xfv8-q8cj 2026-10-06T00:12:20.031521+00:00

The GiveWP WordPress plugin before 4.16.9 does not remove shortcode delimiters from donor-supplied values before rendering them on public pages, and the shortcode stripping it applies can be defeated by nesting, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.