https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 04:32:16 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-23726 cnvd-2025-23726 https://cve.radiocsirt.org/vuln/cnvd-2025-23726 https://cve.radiocsirt.org/vuln/euvd-2026-291407 EUVD-2026-291407 https://cve.radiocsirt.org/vuln/euvd-2026-291407 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8669 <p>The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the reset_customize_section function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.</p> <p>The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the reset_customize_section function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8669 https://cve.radiocsirt.org/vuln/ghsa-mf7h-pjm6-28hp <p>The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the reset_customize_section function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.</p> <p>The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11. This is due to missing or incorrect nonce validation on the reset_customize_section function. This makes it possible for unauthenticated attackers to reset theme customization settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.</p> https://cve.radiocsirt.org/vuln/ghsa-mf7h-pjm6-28hp