https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:56:07.017132+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-81429 CVE-2026-81429 — Export & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRF 2026-10-05T20:56:07.033530+00:00

Affected: Unknown Export & Import WPBakery Page Builder

The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a crafted template via a forged request that results in Stored Cross-Site Scripting executed in the administrator's session.