https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 02:16:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351251 EUVD-2026-351251 https://cve.radiocsirt.org/vuln/euvd-2026-351251 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17011 <p>The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.</p> <p>The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-17011 https://cve.radiocsirt.org/vuln/ghsa-gf2c-5g46-3crp <p>The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.</p> <p>The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.</p> https://cve.radiocsirt.org/vuln/ghsa-gf2c-5g46-3crp