https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 12:09:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-165209 EUVD-2026-165209 https://cve.radiocsirt.org/vuln/euvd-2026-165209 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4163 <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-4163 https://cve.radiocsirt.org/vuln/ghsa-rrw6-j952-j99m <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php.</p> https://cve.radiocsirt.org/vuln/ghsa-rrw6-j952-j99m https://cve.radiocsirt.org/vuln/gsd-2014-4163 gsd-2014-4163 https://cve.radiocsirt.org/vuln/gsd-2014-4163