https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:00:40.522480+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-202837 EUVD-2026-202837 2026-10-02T22:00:40.525208+00:00 EUVD-2026-202837 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2633 fkie_cve-2022-2633 2026-10-02T22:00:40.525239+00:00

The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the ~/public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server.

 https://cve.radiocsirt.org/vuln/ghsa-524p-6j7x-rwrc GHSA-524p-6j7x-rwrc 2026-10-02T22:00:40.525270+00:00

The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the ~/public/video.php file in versions up to, and including 2.6.0. This makes it possible for unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server.

 https://cve.radiocsirt.org/vuln/gsd-2022-2633 gsd-2022-2633 2026-10-02T22:00:40.525288+00:00 gsd-2022-2633