https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:24:04.959830+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-213416 EUVD-2026-213416 2026-10-06T16:24:04.964942+00:00 EUVD-2026-213416 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1624 fkie_cve-2023-1624 2026-10-06T16:24:04.964982+00:00

The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to make users with the wpcode_activate_snippets capability delete arbitrary log files on the server, including outside of the blog folders

 https://cve.radiocsirt.org/vuln/ghsa-2h2j-55g7-g43c GHSA-2h2j-55g7-g43c 2026-10-06T16:24:04.965026+00:00

The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder. This could allow attackers to make users with the wpcode_activate_snippets capability delete arbitrary log files on the server, including outside of the blog folders

 https://cve.radiocsirt.org/vuln/gsd-2023-1624 gsd-2023-1624 2026-10-06T16:24:04.965063+00:00 gsd-2023-1624