https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:28:45.589538+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03307 bdu:2021-03307 2026-10-06T06:28:45.593433+00:00 bdu:2021-03307 https://cve.radiocsirt.org/vuln/cnvd-2021-36538 cnvd-2021-36538 2026-10-06T06:28:45.593466+00:00 cnvd-2021-36538 https://cve.radiocsirt.org/vuln/euvd-2026-23601 EUVD-2026-23601 2026-10-06T06:28:45.593481+00:00 EUVD-2026-23601 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24192 fkie_cve-2021-24192 2026-10-06T06:28:45.593492+00:00

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.

 https://cve.radiocsirt.org/vuln/ghsa-qvhh-p8m2-pw7f GHSA-qvhh-p8m2-pw7f 2026-10-06T06:28:45.593520+00:00

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.

 https://cve.radiocsirt.org/vuln/gsd-2021-24192 gsd-2021-24192 2026-10-06T06:28:45.593537+00:00 gsd-2021-24192