Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:32:54 +0000 EUVD-2026-164860 https://cve.radiocsirt.org/vuln/euvd-2026-164860 EUVD-2026-164860 https://cve.radiocsirt.org/vuln/euvd-2026-164860 fkie_cve-2018-11632 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11632 <p>An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings via wp-admin/admin-post.php CSRF. There&#39;s no nonce or capability check in the whatsapp_share_setting_add_update() function.</p> <p>An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings via wp-admin/admin-post.php CSRF. There&#39;s no nonce or capability check in the whatsapp_share_setting_add_update() function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-11632 GHSA-v4r4-cgq6-827p https://cve.radiocsirt.org/vuln/ghsa-v4r4-cgq6-827p <p>An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings via wp-admin/admin-post.php CSRF. There&#39;s no nonce or capability check in the whatsapp_share_setting_add_update() function.</p> <p>An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber plugin 1.0.8 for WordPress. If an admin user can be tricked into visiting a crafted URL created by an attacker (via spear phishing/social engineering), the attacker can change the plugin settings via wp-admin/admin-post.php CSRF. There&#39;s no nonce or capability check in the whatsapp_share_setting_add_update() function.</p> https://cve.radiocsirt.org/vuln/ghsa-v4r4-cgq6-827p gsd-2018-11632 https://cve.radiocsirt.org/vuln/gsd-2018-11632 gsd-2018-11632 https://cve.radiocsirt.org/vuln/gsd-2018-11632