https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T16:23:42.521489+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109319 CVE-2026-109319 — Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authorization and CSRF in Moderation 2026-10-19T16:23:42.522529+00:00

Affected: getgrav grav-plugin-guestbook

Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via nonce-less GET requests, can delete or approve Guestbook entries.