Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 00:24:58 +0000 EUVD-2026-24282 https://cve.radiocsirt.org/vuln/euvd-2026-24282 EUVD-2026-24282 https://cve.radiocsirt.org/vuln/euvd-2026-24282 fkie_cve-2021-24912 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24912 <p>The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to make authorised users add a translation. Given the lack of sanitisation in the tk0 parameter, this could lead to a Stored Cross-Site Scripting issue which will be executed in the context of a logged in admin</p> <p>The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to make authorised users add a translation. Given the lack of sanitisation in the tk0 parameter, this could lead to a Stored Cross-Site Scripting issue which will be executed in the context of a logged in admin</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24912 GHSA-76qx-g957-hwpc https://cve.radiocsirt.org/vuln/ghsa-76qx-g957-hwpc <p>The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to make authorised users add a translation. Given the lack of sanitisation in the tk0 parameter, this could lead to a Stored Cross-Site Scripting issue which will be executed in the context of a logged in admin</p> <p>The Transposh WordPress Translation WordPress plugin before 1.0.8 does not have CSRF check in its tp_translation AJAX action, which could allow attackers to make authorised users add a translation. Given the lack of sanitisation in the tk0 parameter, this could lead to a Stored Cross-Site Scripting issue which will be executed in the context of a logged in admin</p> https://cve.radiocsirt.org/vuln/ghsa-76qx-g957-hwpc gsd-2021-24912 https://cve.radiocsirt.org/vuln/gsd-2021-24912 gsd-2021-24912 https://cve.radiocsirt.org/vuln/gsd-2021-24912