https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:02:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-283384 EUVD-2026-283384 https://cve.radiocsirt.org/vuln/euvd-2026-283384 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3422 <p>The The Everest Forms – Contact Form, Quiz, Survey, Newsletter &amp; Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.</p> <p>The The Everest Forms – Contact Form, Quiz, Survey, Newsletter &amp; Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3422 https://cve.radiocsirt.org/vuln/ghsa-7rrr-jvfx-w2gc <p>The The Everest Forms – Contact Form, Quiz, Survey, Newsletter &amp; Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.</p> <p>The The Everest Forms – Contact Form, Quiz, Survey, Newsletter &amp; Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.</p> https://cve.radiocsirt.org/vuln/ghsa-7rrr-jvfx-w2gc https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2156 <p>Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um serverseitige Request-Forgery-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, beliebigen Code mit SYSTEM-Rechten auszuführen oder erweiterte Rechte zu erlangen.</p> <p>Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um serverseitige Request-Forgery-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, beliebigen Code mit SYSTEM-Rechten auszuführen oder erweiterte Rechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2156