https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:20:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349703 EUVD-2026-349703 https://cve.radiocsirt.org/vuln/euvd-2026-349703 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14225 <p>The Easy Appointments WordPress plugin before 3.12.28 does not correctly validate shortcode input in one of its block-rendering actions, checking only the first tag of the supplied string against an allowlist while rendering the entire string, allowing users with contributor-level access to execute arbitrary registered shortcodes.</p> <p>The Easy Appointments WordPress plugin before 3.12.28 does not correctly validate shortcode input in one of its block-rendering actions, checking only the first tag of the supplied string against an allowlist while rendering the entire string, allowing users with contributor-level access to execute arbitrary registered shortcodes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-14225 https://cve.radiocsirt.org/vuln/ghsa-m9g2-wqhj-c2j4 <p>The Easy Appointments WordPress plugin through 3.12.26 does not correctly validate shortcode input in one of its block-rendering actions, checking only the first tag of the supplied string against an allowlist while rendering the entire string, allowing users with contributor-level access to execute arbitrary registered shortcodes.</p> <p>The Easy Appointments WordPress plugin through 3.12.26 does not correctly validate shortcode input in one of its block-rendering actions, checking only the first tag of the supplied string against an allowlist while rendering the entire string, allowing users with contributor-level access to execute arbitrary registered shortcodes.</p> https://cve.radiocsirt.org/vuln/ghsa-m9g2-wqhj-c2j4