Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:58:43 +0000 CVE-2021-38342 — Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification https://cve.radiocsirt.org/vuln/cve-2021-38342 <p><strong>Affected:</strong> Kyle Phillips Nested Pages</p> <p>The Nested Pages WordPress plugin &lt;= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, reassigning their ownership, and editing other metadata.</p> <p><strong>Affected:</strong> Kyle Phillips Nested Pages</p> <p>The Nested Pages WordPress plugin &lt;= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, reassigning their ownership, and editing other metadata.</p> https://cve.radiocsirt.org/vuln/cve-2021-38342