https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 15:51:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-54461 EUVD-2026-54461 https://cve.radiocsirt.org/vuln/euvd-2026-54461 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11591 <p>The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[&#39;action&#39;] value and the $_GET[&#39;action&#39;] value, and the latter is unsanitized.</p> <p>The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[&#39;action&#39;] value and the $_GET[&#39;action&#39;] value, and the latter is unsanitized.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11591 https://cve.radiocsirt.org/vuln/ghsa-xq4f-f2vc-9hxr <p>The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[&#39;action&#39;] value and the $_GET[&#39;action&#39;] value, and the latter is unsanitized.</p> <p>The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[&#39;action&#39;] value and the $_GET[&#39;action&#39;] value, and the latter is unsanitized.</p> https://cve.radiocsirt.org/vuln/ghsa-xq4f-f2vc-9hxr https://cve.radiocsirt.org/vuln/gsd-2019-11591 gsd-2019-11591 https://cve.radiocsirt.org/vuln/gsd-2019-11591