https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T02:47:30.628911+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-0420 CVE-2023-0420 — Custom Post Type and Taxonomy GUI Manager <= 1.1 - Stored XSS via CSRF 2026-10-20T02:47:30.630410+00:00

Affected: Unknown Custom Post Type and Taxonomy GUI Manager

The Custom Post Type and Taxonomy GUI Manager WordPress plugin through 1.1 does not have CSRF, and is lacking sanitising as well as escaping in some parameters, allowing attackers to make a logged in admin put Stored Cross-Site Scripting payloads via CSRF