https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:33:15.464132+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-37141 cnvd-2021-37141 2026-10-09T12:33:15.467429+00:00 cnvd-2021-37141 https://cve.radiocsirt.org/vuln/euvd-2026-23753 EUVD-2026-23753 2026-10-09T12:33:15.467463+00:00 EUVD-2026-23753 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24307 fkie_cve-2021-24307 2026-10-09T12:33:15.467477+00:00

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup .ini file in the section "Tool > Import/Export". However, the plugin attempts to unserialize values of the .ini file. Moreover, the plugin embeds Monolog library which can be used to craft a gadget chain and thus trigger system command execution.

 https://cve.radiocsirt.org/vuln/ghsa-fg47-8fhh-p6fc GHSA-fg47-8fhh-p6fc 2026-10-09T12:33:15.467512+00:00

The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup .ini file in the section "Tool > Import/Export". However, the plugin attempts to unserialize values of the .ini file. Moreover, the plugin embeds Monolog library which can be used to craft a gadget chain and thus trigger system command execution.

 https://cve.radiocsirt.org/vuln/gsd-2021-24307 gsd-2021-24307 2026-10-09T12:33:15.467532+00:00 gsd-2021-24307