https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:29:09.697809+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-12408 EUVD-2026-12408 2026-10-03T14:29:09.700359+00:00 EUVD-2026-12408 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2594 fkie_cve-2022-2594 2026-10-03T14:29:09.700392+00:00

The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend form available. This vulnerability was introduced in the 5.0 rewrite and did not exist prior to that release.

 https://cve.radiocsirt.org/vuln/ghsa-m8hq-2c8m-w6cm GHSA-m8hq-2c8m-w6cm 2026-10-03T14:29:09.700424+00:00

The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend form available. This vulnerability was introduced in the 5.0 rewrite and did not exist prior to that release.

 https://cve.radiocsirt.org/vuln/gsd-2022-2594 gsd-2022-2594 2026-10-03T14:29:09.700441+00:00 gsd-2022-2594