https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T12:43:02.583937+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-20083 CVE-2016-20083 — WordPress More Fields Plugin 2.1 Cross-Site Request Forgery 2026-10-18T12:43:02.585128+00:00

Affected: henrikmelin More Fields

WordPress More Fields Plugin 2.1 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by disabling CSRF token validation. Attackers can craft malicious web pages that trick logged-in administrators into adding or deleting custom fields and boxes on the Write/Edit page via POST and GET requests to the options-general.php endpoint.