https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:01:08.083028+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-13738 bdu:2026-13738 2026-10-04T04:01:08.087914+00:00 bdu:2026-13738 https://cve.radiocsirt.org/vuln/bit-wordpress-2022-3590 BIT-wordpress-2022-3590 — WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding 2026-10-04T04:01:08.087946+00:00

Affected: Bitnami: wordpress

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

 https://cve.radiocsirt.org/vuln/euvd-2026-232114 EUVD-2026-232114 2026-10-04T04:01:08.087978+00:00 EUVD-2026-232114 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3590 fkie_cve-2022-3590 2026-10-04T04:01:08.087991+00:00

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

 https://cve.radiocsirt.org/vuln/ghsa-mjj5-7gmf-mfjx GHSA-mjj5-7gmf-mfjx 2026-10-04T04:01:08.088011+00:00

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

 https://cve.radiocsirt.org/vuln/gsd-2022-3590 gsd-2022-3590 2026-10-04T04:01:08.088026+00:00 gsd-2022-3590 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3590 UBUNTU-CVE-2022-3590 2026-10-04T04:01:08.088036+00:00

Affected: Ubuntu:16.04:LTS: wordpress, Ubuntu:18.04:LTS: wordpress, Ubuntu:20.04:LTS: wordpress, Ubuntu:22.04:LTS: wordpress, Ubuntu:24.04:LTS: wordpress, Ubuntu:25.10: wordpress, Ubuntu:26.04:LTS: wordpress

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2356 WID-SEC-W-2022-2356 — WordPress: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T04:01:08.088062+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in WordPress ausnutzen, um Sicherheitsvorkehrungen zu umgehen.