Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 05:02:23 +0000 CVE-2021-24466 — Verse-O-Matic <= 4.1.1 - CSRF to Stored XSS https://cve.radiocsirt.org/vuln/cve-2021-24466 <p><strong>Affected:</strong> Unknown Verse-O-Matic</p> <p>The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the settings. Due to the lack of sanitisation in the settings and verses, this could also lead to Stored Cross-Site Scripting issues</p> <p><strong>Affected:</strong> Unknown Verse-O-Matic</p> <p>The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the settings. Due to the lack of sanitisation in the settings and verses, this could also lead to Stored Cross-Site Scripting issues</p> https://cve.radiocsirt.org/vuln/cve-2021-24466