Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:43:10 +0000 cnvd-2025-23761 https://cve.radiocsirt.org/vuln/cnvd-2025-23761 cnvd-2025-23761 https://cve.radiocsirt.org/vuln/cnvd-2025-23761 EUVD-2026-284108 https://cve.radiocsirt.org/vuln/euvd-2026-284108 EUVD-2026-284108 https://cve.radiocsirt.org/vuln/euvd-2026-284108 fkie_cve-2025-10735 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10735 <p>The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via the mcbSubmit_Form_Data(). This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> <p>The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via the mcbSubmit_Form_Data(). This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-10735 GHSA-qxh8-5779-hg4r https://cve.radiocsirt.org/vuln/ghsa-qxh8-5779-hg4r <p>The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via the mcbSubmit_Form_Data(). This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> <p>The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via the mcbSubmit_Form_Data(). This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> https://cve.radiocsirt.org/vuln/ghsa-qxh8-5779-hg4r