https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T05:02:33.083553+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24466 CVE-2021-24466 — Verse-O-Matic <= 4.1.1 - CSRF to Stored XSS 2026-10-27T05:02:33.084605+00:00

Affected: Unknown Verse-O-Matic

The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the settings. Due to the lack of sanitisation in the settings and verses, this could also lead to Stored Cross-Site Scripting issues