https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 01:11:10 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-332314 EUVD-2026-332314 https://cve.radiocsirt.org/vuln/euvd-2026-332314 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12472 <p>The Kirki – Freeform Page Builder, Website Builder &amp; Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.11. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to send arbitrary HTML-injected emails — including phishing messages embedding a real, valid WordPress password-reset URL for the targeted user — to any registered user via the site&#39;s own mail server, abusing its SPF/DKIM reputation. The attacker-controlled emailSubject parameter is passed to wp_mail() with only sanitize_text_field() applied, while emailBody &#39;text&#39; items are concatenated raw into the HTML email body with no escaping, and &#39;chip&#39; items can include the genuine WordPress password-reset link for the targeted account.</p> <p>The Kirki – Freeform Page Builder, Website Builder &amp; Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.11. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to send arbitrary HTML-injected emails — including phishing messages embedding a real, valid WordPress password-reset URL for the targeted user — to any registered user via the site&#39;s own mail server, abusing its SPF/DKIM reputation. The attacker-controlled emailSubject parameter is passed to wp_mail() with only sanitize_text_field() applied, while emailBody &#39;text&#39; items are concatenated raw into the HTML email body with no escaping, and &#39;chip&#39; items can include the genuine WordPress password-reset link for the targeted account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12472 https://cve.radiocsirt.org/vuln/ghsa-7w58-pfxv-fq26 <p>The Kirki – Freeform Page Builder, Website Builder &amp; Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.11. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to send arbitrary HTML-injected emails — including phishing messages embedding a real, valid WordPress password-reset URL for the targeted user — to any registered user via the site&#39;s own mail server, abusing its SPF/DKIM reputation. The attacker-controlled emailSubject parameter is passed to wp_mail() with only sanitize_text_field() applied, while emailBody &#39;text&#39; items are concatenated raw into the HTML email body with no escaping, and &#39;chip&#39; items can include the genuine WordPress password-reset link for the targeted account.</p> <p>The Kirki – Freeform Page Builder, Website Builder &amp; Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.11. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to send arbitrary HTML-injected emails — including phishing messages embedding a real, valid WordPress password-reset URL for the targeted user — to any registered user via the site&#39;s own mail server, abusing its SPF/DKIM reputation. The attacker-controlled emailSubject parameter is passed to wp_mail() with only sanitize_text_field() applied, while emailBody &#39;text&#39; items are concatenated raw into the HTML email body with no escaping, and &#39;chip&#39; items can include the genuine WordPress password-reset link for the targeted account.</p> https://cve.radiocsirt.org/vuln/ghsa-7w58-pfxv-fq26