Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:56:11 +0000 EUVD-2026-275963 https://cve.radiocsirt.org/vuln/euvd-2026-275963 EUVD-2026-275963 https://cve.radiocsirt.org/vuln/euvd-2026-275963 fkie_cve-2026-22202 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22202 <p>wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET request with a valid HMAC key. Attackers can embed the deletecomments action URL in image tags or other resources to trigger permanent deletion of comments without user confirmation or POST-based CSRF protection.</p> <p>wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET request with a valid HMAC key. Attackers can embed the deletecomments action URL in image tags or other resources to trigger permanent deletion of comments without user confirmation or POST-based CSRF protection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22202 GHSA-fprc-m8hw-hvjj https://cve.radiocsirt.org/vuln/ghsa-fprc-m8hw-hvjj <p>wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET request with a valid HMAC key. Attackers can embed the deletecomments action URL in image tags or other resources to trigger permanent deletion of comments without user confirmation or POST-based CSRF protection.</p> <p>wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GET request with a valid HMAC key. Attackers can embed the deletecomments action URL in image tags or other resources to trigger permanent deletion of comments without user confirmation or POST-based CSRF protection.</p> https://cve.radiocsirt.org/vuln/ghsa-fprc-m8hw-hvjj