https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T10:18:12.842003+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-81429 fkie_cve-2026-81429 2026-10-04T10:18:13.072171+00:00

The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a crafted template via a forged request that results in Stored Cross-Site Scripting executed in the administrator's session.

 https://vulnerability.circl.lu/vuln/ghsa-fcp7-pjhr-2vrp GHSA-fcp7-pjhr-2vrp 2026-10-04T10:18:13.072289+00:00

The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a crafted template via a forged request that results in Stored Cross-Site Scripting executed in the administrator's session.