Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 07:53:55 +0000 EUVD-2026-24017 https://cve.radiocsirt.org/vuln/euvd-2026-24017 EUVD-2026-24017 https://cve.radiocsirt.org/vuln/euvd-2026-24017 fkie_cve-2021-24635 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24635 <p>The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user (such as subscriber) to call them and 1) Get and search through title and content of Draft post, 2) Get title of a password-protected post as well as 3) Upload an image from an URL</p> <p>The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user (such as subscriber) to call them and 1) Get and search through title and content of Draft post, 2) Get title of a password-protected post as well as 3) Upload an image from an URL</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24635 GHSA-23v9-8jvm-jh7q https://cve.radiocsirt.org/vuln/ghsa-23v9-8jvm-jh7q <p>The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user (such as subscriber) to call them and 1) Get and search through title and content of Draft post, 2) Get title of a password-protected post as well as 3) Upload an image from an URL</p> <p>The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user (such as subscriber) to call them and 1) Get and search through title and content of Draft post, 2) Get title of a password-protected post as well as 3) Upload an image from an URL</p> https://cve.radiocsirt.org/vuln/ghsa-23v9-8jvm-jh7q gsd-2021-24635 https://cve.radiocsirt.org/vuln/gsd-2021-24635 gsd-2021-24635 https://cve.radiocsirt.org/vuln/gsd-2021-24635