https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:41:35 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-348681 EUVD-2026-348681 https://cve.radiocsirt.org/vuln/euvd-2026-348681 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13729 <p>The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers to create rogue records or delete legitimate ones via a forged request (CSRF) when a logged-in administrator is tricked into visiting a crafted page.</p> <p>The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers to create rogue records or delete legitimate ones via a forged request (CSRF) when a logged-in administrator is tricked into visiting a crafted page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-13729 https://cve.radiocsirt.org/vuln/ghsa-2c9c-r2jq-hgq6 <p>The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers to create rogue records or delete legitimate ones via a forged request (CSRF) when a logged-in administrator is tricked into visiting a crafted page.</p> <p>The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers to create rogue records or delete legitimate ones via a forged request (CSRF) when a logged-in administrator is tricked into visiting a crafted page.</p> https://cve.radiocsirt.org/vuln/ghsa-2c9c-r2jq-hgq6