Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 19:07:27 +0000 cnvd-2015-00262 https://cve.radiocsirt.org/vuln/cnvd-2015-00262 cnvd-2015-00262 https://cve.radiocsirt.org/vuln/cnvd-2015-00262 EUVD-2026-103845 https://cve.radiocsirt.org/vuln/euvd-2026-103845 EUVD-2026-103845 https://cve.radiocsirt.org/vuln/euvd-2026-103845 fkie_cve-2014-9441 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9441 <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) ll__opt[image2_url] or (3) ll__opt[image3_url] parameter in a ll_save_settings action to wp-admin/admin-ajax.php.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) ll__opt[image2_url] or (3) ll__opt[image3_url] parameter in a ll_save_settings action to wp-admin/admin-ajax.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-9441 GHSA-w2g9-gjjq-wg6x https://cve.radiocsirt.org/vuln/ghsa-w2g9-gjjq-wg6x <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) ll__opt[image2_url] or (3) ll__opt[image3_url] parameter in a ll_save_settings action to wp-admin/admin-ajax.php.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) ll__opt[image2_url] or (3) ll__opt[image3_url] parameter in a ll_save_settings action to wp-admin/admin-ajax.php.</p> https://cve.radiocsirt.org/vuln/ghsa-w2g9-gjjq-wg6x gsd-2014-9441 https://cve.radiocsirt.org/vuln/gsd-2014-9441 gsd-2014-9441 https://cve.radiocsirt.org/vuln/gsd-2014-9441