https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:08:55.644143+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-wordpress-2022-21663 BIT-wordpress-2022-21663 — Authenticated Object Injection in Multisites in WordPress 2026-10-03T21:08:55.648216+00:00

Affected: Bitnami: wordpress

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-010 certfr-2022-avi-010 — De multiples vulnérabilités ont été découvertes dans WordPress. Elles permettent à un attaquant de provoquer une exécut… 2026-10-03T21:08:55.648266+00:00 certfr-2022-avi-010 https://cve.radiocsirt.org/vuln/euvd-2026-232847 EUVD-2026-232847 2026-10-03T21:08:55.648286+00:00 EUVD-2026-232847 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21663 fkie_cve-2022-21663 2026-10-03T21:08:55.648299+00:00

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-21663 gsd-2022-21663 2026-10-03T21:08:55.648331+00:00 gsd-2022-21663 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-21663 UBUNTU-CVE-2022-21663 2026-10-03T21:08:55.648342+00:00

Affected: Ubuntu:16.04:LTS: wordpress, Ubuntu:18.04:LTS: wordpress, Ubuntu:20.04:LTS: wordpress

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue.