https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T14:01:09.906831+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-281 certa-2009-avi-281 — Plusieurs vulnérabilités permettant, entre autres, la réalisation d'injection de code indirecte et de contourner la pol… 2026-10-24T14:01:09.965634+00:00 certa-2009-avi-281 https://cve.radiocsirt.org/vuln/euvd-2026-123216 EUVD-2026-123216 2026-10-24T14:01:09.965675+00:00 EUVD-2026-123216 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2334 fkie_cve-2009-2334 2026-10-24T14:01:09.965690+00:00

wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-54c4-23hm-v988 GHSA-54c4-23hm-v988 2026-10-24T14:01:09.965766+00:00

wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2009-2334 gsd-2009-2334 2026-10-24T14:01:09.965784+00:00 gsd-2009-2334