https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:14:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233161 EUVD-2026-233161 https://cve.radiocsirt.org/vuln/euvd-2026-233161 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4823 <p>The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting.</p> <p>The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-4823 https://cve.radiocsirt.org/vuln/ghsa-279q-vh9q-c9w4 <p>The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting.</p> <p>The WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting.</p> https://cve.radiocsirt.org/vuln/ghsa-279q-vh9q-c9w4 https://cve.radiocsirt.org/vuln/gsd-2023-4823 gsd-2023-4823 https://cve.radiocsirt.org/vuln/gsd-2023-4823