https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:17:05 +0000 https://cve.radiocsirt.org/vuln/cve-2026-80440 <p><strong>Affected:</strong> Unknown Hustle</p> <p>The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the message it returns after submission, because the guard it applies can be defeated by nesting, allowing unauthenticated users to run any shortcode registered on the site.</p> <p><strong>Affected:</strong> Unknown Hustle</p> <p>The Hustle WordPress plugin before 7.8.14.2 does not prevent shortcodes in submitted form values from being executed when it substitutes those values into the message it returns after submission, because the guard it applies can be defeated by nesting, allowing unauthenticated users to run any shortcode registered on the site.</p> https://cve.radiocsirt.org/vuln/cve-2026-80440