https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T02:29:57.266775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-39353 CVE-2021-39353 — Easy Registration Forms <= 2.1.1 Cross-Site Request Forgery to Stored Cross-Site Scripting 2026-10-10T02:29:57.268478+00:00

Affected: Easy Registration Forms

The Easy Registration Forms WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the ajax_add_form function found in the ~/includes/class-form.php file which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 2.1.1.