https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:31:32.401762+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-53483 CVE-2025-53483 — SecurePoll: Multiple admin actions vulnerable to Cross-Site Request Forgery 2026-10-07T09:31:32.417490+00:00

Affected: Wikimedia Foundation Mediawiki - SecurePoll extension

ArchivePage.php, UnarchivePage.php, and VoterEligibilityPage#executeClear() do not validate request methods or CSRF tokens, allowing attackers to trigger sensitive actions if an admin visits a malicious site.

This issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.