Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 15:28:47 +0000 CVE-2019-12826 https://db.gcve.eu/vuln/cve-2019-12826 <p>A Cross-Site-Request-Forgery (CSRF) vulnerability in widget_logic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress allows remote attackers to execute PHP code via snippets (that are attached to widgets and then eval&#39;d to dynamically determine their visibility) by crafting a malicious POST request that tricks administrators into adding the code.</p> <p>A Cross-Site-Request-Forgery (CSRF) vulnerability in widget_logic.php in the 2by2host Widget Logic plugin before 5.10.2 for WordPress allows remote attackers to execute PHP code via snippets (that are attached to widgets and then eval&#39;d to dynamically determine their visibility) by crafting a malicious POST request that tricks administrators into adding the code.</p> https://db.gcve.eu/vuln/cve-2019-12826