https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:52:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-292351 EUVD-2026-292351 https://cve.radiocsirt.org/vuln/euvd-2026-292351 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6294 <p>The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4. This is due to missing nonce validation in the gpdisplay_option() function, which handles the plugin settings page. The settings form does not include a wp_nonce_field(), and the form handler does not call check_admin_referer() or wp_verify_nonce() before processing the POST request. This makes it possible for unauthenticated attackers to trick a logged-in administrator into submitting a crafted request that changes the plugin&#39;s settings (stored via update_option()), such as the display style used to render the PageRank badge.</p> <p>The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4. This is due to missing nonce validation in the gpdisplay_option() function, which handles the plugin settings page. The settings form does not include a wp_nonce_field(), and the form handler does not call check_admin_referer() or wp_verify_nonce() before processing the POST request. This makes it possible for unauthenticated attackers to trick a logged-in administrator into submitting a crafted request that changes the plugin&#39;s settings (stored via update_option()), such as the display style used to render the PageRank badge.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6294 https://cve.radiocsirt.org/vuln/ghsa-8w4w-mfg4-cvw8 <p>The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4. This is due to missing nonce validation in the gpdisplay_option() function, which handles the plugin settings page. The settings form does not include a wp_nonce_field(), and the form handler does not call check_admin_referer() or wp_verify_nonce() before processing the POST request. This makes it possible for unauthenticated attackers to trick a logged-in administrator into submitting a crafted request that changes the plugin&#39;s settings (stored via update_option()), such as the display style used to render the PageRank badge.</p> <p>The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4. This is due to missing nonce validation in the gpdisplay_option() function, which handles the plugin settings page. The settings form does not include a wp_nonce_field(), and the form handler does not call check_admin_referer() or wp_verify_nonce() before processing the POST request. This makes it possible for unauthenticated attackers to trick a logged-in administrator into submitting a crafted request that changes the plugin&#39;s settings (stored via update_option()), such as the display style used to render the PageRank badge.</p> https://cve.radiocsirt.org/vuln/ghsa-8w4w-mfg4-cvw8