Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:45:29 +0000 EUVD-2026-289823 https://cve.radiocsirt.org/vuln/euvd-2026-289823 EUVD-2026-289823 https://cve.radiocsirt.org/vuln/euvd-2026-289823 fkie_cve-2023-1871 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1871 <p>The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the deleteLang function. This makes it possible for unauthenticated attackers to reset the plugin&#39;s quick language translation settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.</p> <p>The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect nonce validation on the deleteLang function. This makes it possible for unauthenticated attackers to reset the plugin&#39;s quick language translation settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-1871 GHSA-jwxx-2466-4xrr https://cve.radiocsirt.org/vuln/ghsa-jwxx-2466-4xrr <p>The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. This is due to missing or incorrect nonce validation on the deleteLang function. This makes it possible for unauthenticated attackers to reset the plugin&#39;s quick language translation settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.</p> <p>The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. This is due to missing or incorrect nonce validation on the deleteLang function. This makes it possible for unauthenticated attackers to reset the plugin&#39;s quick language translation settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.</p> https://cve.radiocsirt.org/vuln/ghsa-jwxx-2466-4xrr gsd-2023-1871 https://cve.radiocsirt.org/vuln/gsd-2023-1871 gsd-2023-1871 https://cve.radiocsirt.org/vuln/gsd-2023-1871