https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:12:08 +0000 https://cve.radiocsirt.org/vuln/cve-2019-11557 <p>The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[&#39;action&#39;] value and the $_GET[&#39;action&#39;] value, and the latter is unsanitized.</p> <p>The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST[&#39;action&#39;] value and the $_GET[&#39;action&#39;] value, and the latter is unsanitized.</p> https://cve.radiocsirt.org/vuln/cve-2019-11557