https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:49:22.297550+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287156 EUVD-2026-287156 2026-10-03T17:49:22.361267+00:00 EUVD-2026-287156 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2688 fkie_cve-2023-2688 2026-10-03T17:49:22.361306+00:00

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/uploads by default) outside of the web root.

 https://cve.radiocsirt.org/vuln/ghsa-9f3m-9cwg-r3h9 GHSA-9f3m-9cwg-r3h9 2026-10-03T17:49:22.361340+00:00

The WordPress File Upload and WordPress File Upload Pro plugins for WordPress are vulnerable to Path Traversal in versions up to, and including, 4.19.1 via the vulnerable parameter wfu_newpath. This allows administrator-level attackers to move files uploaded with the plugin (located in wp-content/uploads by default) outside of the web root.

 https://cve.radiocsirt.org/vuln/gsd-2023-2688 gsd-2023-2688 2026-10-03T17:49:22.361357+00:00 gsd-2023-2688