Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 20:46:53 +0000 CVE-2022-1780 — LaTeX for WordPress <= 3.4.10 - Arbitrary Settings Update via CSRF to Stored XSS https://cve.radiocsirt.org/vuln/cve-2022-1780 <p><strong>Affected:</strong> Unknown LaTeX for WordPress</p> <p>The LaTeX for WordPress plugin through 3.4.10 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack which could also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping</p> <p><strong>Affected:</strong> Unknown LaTeX for WordPress</p> <p>The LaTeX for WordPress plugin through 3.4.10 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack which could also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping</p> https://cve.radiocsirt.org/vuln/cve-2022-1780