https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:56:40.476768+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-10723 cnvd-2018-10723 2026-10-02T22:56:40.480825+00:00 cnvd-2018-10723 https://cve.radiocsirt.org/vuln/euvd-2026-60766 EUVD-2026-60766 2026-10-02T22:56:40.480862+00:00 EUVD-2026-60766 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0588 fkie_cve-2018-0588 2026-10-02T22:56:40.480877+00:00

Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary files via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-m5gh-j9fw-88fp GHSA-m5gh-j9fw-88fp 2026-10-02T22:56:40.480906+00:00

Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attackers to read arbitrary files via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2018-0588 gsd-2018-0588 2026-10-02T22:56:40.480922+00:00 gsd-2018-0588 https://cve.radiocsirt.org/vuln/jvndb-2018-000045 jvndb-2018-000045 2026-10-02T22:56:40.480933+00:00

The WordPress plugin "Ultimate Member" provided by Ultimate Member contains multiple vulnerabilities listed below. * Cross-site Scripting (CWE-79) - CVE-2018-0585 * Directory Traversal in the shortcodes function (CWE-22) - CVE-2018-0586 * Arbitrary File Upload (CWE-434) - CVE-2018-0587 * Directory Traversal in the AJAX function (CWE-22) - CVE-2018-0588 * Access Restriction Bypass in the "Forms" page (CWE-284) - CVE-2018-0589 * Access Restriction Bypass due to an issue in processing "Role" (CWE-284) - CVE-2018-0590 Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.