https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:04:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-105919 EUVD-2026-105919 https://cve.radiocsirt.org/vuln/euvd-2026-105919 https://cve.radiocsirt.org/vuln/fkie_cve-2013-2107 <p>Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the &#34;List of alternative recipients&#34; via the mailonupdate_mailto parameter in the mail-on-update page to wp-admin/options-general.php. NOTE: a third party claims that 5.2.1 and 5.2.2 are also vulnerable, but the issue might require a separate CVE identifier since this might reflect an incomplete fix.</p> <p>Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the &#34;List of alternative recipients&#34; via the mailonupdate_mailto parameter in the mail-on-update page to wp-admin/options-general.php. NOTE: a third party claims that 5.2.1 and 5.2.2 are also vulnerable, but the issue might require a separate CVE identifier since this might reflect an incomplete fix.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-2107 https://cve.radiocsirt.org/vuln/ghsa-wc3q-ccmv-3p9w <p>Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the &#34;List of alternative recipients&#34; via the mailonupdate_mailto parameter in the mail-on-update page to wp-admin/options-general.php. NOTE: a third party claims that 5.2.1 and 5.2.2 are also vulnerable, but the issue might require a separate CVE identifier since this might reflect an incomplete fix.</p> <p>Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the &#34;List of alternative recipients&#34; via the mailonupdate_mailto parameter in the mail-on-update page to wp-admin/options-general.php. NOTE: a third party claims that 5.2.1 and 5.2.2 are also vulnerable, but the issue might require a separate CVE identifier since this might reflect an incomplete fix.</p> https://cve.radiocsirt.org/vuln/ghsa-wc3q-ccmv-3p9w https://cve.radiocsirt.org/vuln/gsd-2013-2107 gsd-2013-2107 https://cve.radiocsirt.org/vuln/gsd-2013-2107