https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T23:02:40.428458+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2022-44952 cnvd-2022-44952 2026-10-01T23:02:40.769442+00:00 cnvd-2022-44952 https://vulnerability.circl.lu/vuln/fkie_cve-2022-1001 fkie_cve-2022-1001 2026-10-01T23:02:40.769513+00:00

The WP Downgrade WordPress plugin before 1.2.3 only perform client side validation of its "WordPress Target Version" settings, but does not sanitise and escape it server side, allowing high privilege users such as admin to perform Cross-Site attacks even when the unfiltered_html capability is disallowed

 https://vulnerability.circl.lu/vuln/ghsa-x9cg-qwvm-rg5j GHSA-x9cg-qwvm-rg5j 2026-10-01T23:02:40.769586+00:00

The WP Downgrade WordPress plugin before 1.2.3 only perform client side validation of its "WordPress Target Version" settings, but does not sanitise and escape it server side, allowing high privilege users such as admin to perform Cross-Site attacks even when the unfiltered_html capability is disallowed

 https://vulnerability.circl.lu/vuln/gsd-2022-1001 gsd-2022-1001 2026-10-01T23:02:40.769619+00:00 gsd-2022-1001