https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T01:13:39.920717+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-13176 fkie_cve-2026-13176 2026-10-01T01:13:39.939423+00:00

The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify event ownership, allowing users with contributor-level access and above to trigger blind server-side requests to arbitrary hosts.

 https://db.gcve.eu/vuln/ghsa-v7v5-h6rx-g9vq GHSA-v7v5-h6rx-g9vq 2026-10-01T01:13:39.939491+00:00

The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify event ownership, allowing users with contributor-level access and above to trigger blind server-side requests to arbitrary hosts.