https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:06:03.858380+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04578 bdu:2021-04578 2026-10-03T08:06:03.946948+00:00 bdu:2021-04578 https://cve.radiocsirt.org/vuln/bit-wordpress-2021-29447 BIT-wordpress-2021-29447 — WordPress Authenticated XXE attack when installation is running PHP 8 2026-10-03T08:06:03.947002+00:00

Affected: Bitnami: wordpress

Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled.

 https://cve.radiocsirt.org/vuln/cnvd-2021-43547 cnvd-2021-43547 2026-10-03T08:06:03.947039+00:00 cnvd-2021-43547 https://cve.radiocsirt.org/vuln/euvd-2026-26337 EUVD-2026-26337 2026-10-03T08:06:03.947053+00:00 EUVD-2026-26337 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29447 fkie_cve-2021-29447 2026-10-03T08:06:03.947065+00:00

Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled.

 https://cve.radiocsirt.org/vuln/gsd-2021-29447 gsd-2021-29447 2026-10-03T08:06:03.947088+00:00 gsd-2021-29447 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-29447 UBUNTU-CVE-2021-29447 2026-10-03T08:06:03.947099+00:00

Affected: Ubuntu:16.04:LTS: wordpress, Ubuntu:18.04:LTS: wordpress, Ubuntu:20.04:LTS: wordpress, Ubuntu:22.04:LTS: wordpress, Ubuntu:24.04:LTS: wordpress, Ubuntu:25.10: wordpress, Ubuntu:26.04:LTS: wordpress

Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled.