Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 11:14:58 +0000 CVE-2025-1288 — wooexim <= 5.0.0 - CSRF to Reflected XSS https://cve.radiocsirt.org/vuln/cve-2025-1288 <p><strong>Affected:</strong> Unknown WOOEXIM</p> <p>The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.</p> <p><strong>Affected:</strong> Unknown WOOEXIM</p> <p>The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.</p> https://cve.radiocsirt.org/vuln/cve-2025-1288