https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 18:48:07 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-44293 cnvd-2021-44293 https://cve.radiocsirt.org/vuln/cnvd-2021-44293 https://cve.radiocsirt.org/vuln/euvd-2026-23801 EUVD-2026-23801 https://cve.radiocsirt.org/vuln/euvd-2026-23801 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24359 <p>The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on behalf of the WordPress site. Such issue could be chained with an open redirect (CVE-2021-24358) in version below 4.1.10, to include a crafted password reset link in the email, which would lead to an account takeover.</p> <p>The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on behalf of the WordPress site. Such issue could be chained with an open redirect (CVE-2021-24358) in version below 4.1.10, to include a crafted password reset link in the email, which would lead to an account takeover.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24359 https://cve.radiocsirt.org/vuln/ghsa-37f5-h3rf-vphw <p>The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on behalf of the WordPress site. Such issue could be chained with an open redirect (CVE-2021-24358) in version below 4.1.10, to include a crafted password reset link in the email, which would lead to an account takeover.</p> <p>The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on behalf of the WordPress site. Such issue could be chained with an open redirect (CVE-2021-24358) in version below 4.1.10, to include a crafted password reset link in the email, which would lead to an account takeover.</p> https://cve.radiocsirt.org/vuln/ghsa-37f5-h3rf-vphw https://cve.radiocsirt.org/vuln/gsd-2021-24359 gsd-2021-24359 https://cve.radiocsirt.org/vuln/gsd-2021-24359