https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:15:25 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-87380 cnvd-2022-87380 https://cve.radiocsirt.org/vuln/cnvd-2022-87380 https://cve.radiocsirt.org/vuln/euvd-2026-12519 EUVD-2026-12519 https://cve.radiocsirt.org/vuln/euvd-2026-12519 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2839 <p>The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them to perform Stored Cross-Site Scripting attacks against logged in admins.</p> <p>The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them to perform Stored Cross-Site Scripting attacks against logged in admins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2839 https://cve.radiocsirt.org/vuln/ghsa-p2c9-6h79-p9j6 <p>The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them to perform Stored Cross-Site Scripting attacks against logged in admins.</p> <p>The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them to perform Stored Cross-Site Scripting attacks against logged in admins.</p> https://cve.radiocsirt.org/vuln/ghsa-p2c9-6h79-p9j6 https://cve.radiocsirt.org/vuln/gsd-2022-2839 gsd-2022-2839 https://cve.radiocsirt.org/vuln/gsd-2022-2839 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2839 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: wordpress, Ubuntu:16.04:LTS: zephyr, Ubuntu:18.04:LTS: wordpress, Ubuntu:18.04:LTS: zephyr, Ubuntu:20.04:LTS: wordpress, Ubuntu:20.04:LTS: zephyr, Ubuntu:22.04:LTS: wordpress, Ubuntu:22.04:LTS: zephyr, Ubuntu:24.04:LTS: wordpress, Ubuntu:24.04:LTS: zephyr and 4 more</p> <p>The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them to perform Stored Cross-Site Scripting attacks against logged in admins.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: wordpress, Ubuntu:16.04:LTS: zephyr, Ubuntu:18.04:LTS: wordpress, Ubuntu:18.04:LTS: zephyr, Ubuntu:20.04:LTS: wordpress, Ubuntu:20.04:LTS: zephyr, Ubuntu:22.04:LTS: wordpress, Ubuntu:22.04:LTS: zephyr, Ubuntu:24.04:LTS: wordpress, Ubuntu:24.04:LTS: zephyr and 4 more</p> <p>The Zephyr Project Manager WordPress plugin before 3.2.55 does not have any authorisation as well as CSRF in all its AJAX actions, allowing unauthenticated users to call them either directly or via CSRF attacks. Furthermore, due to the lack of sanitisation and escaping, it could also allow them to perform Stored Cross-Site Scripting attacks against logged in admins.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2839