https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:51:38.703181+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-wordpress-2023-2745 BIT-wordpress-2023-2745 — WordPress Core < 6.2.1 - Directory Traversal 2026-10-02T23:51:38.898942+00:00

Affected: Bitnami: wordpress

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.

 https://cve.radiocsirt.org/vuln/euvd-2026-289487 EUVD-2026-289487 2026-10-02T23:51:38.899001+00:00 EUVD-2026-289487 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2745 fkie_cve-2023-2745 2026-10-02T23:51:38.899019+00:00

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.

 https://cve.radiocsirt.org/vuln/ghsa-xgqr-2mpj-w9qv GHSA-xgqr-2mpj-w9qv 2026-10-02T23:51:38.899046+00:00

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.

 https://cve.radiocsirt.org/vuln/gsd-2023-2745 gsd-2023-2745 2026-10-02T23:51:38.899063+00:00 gsd-2023-2745 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2745 UBUNTU-CVE-2023-2745 2026-10-02T23:51:38.899075+00:00

Affected: Ubuntu:16.04:LTS: wordpress, Ubuntu:18.04:LTS: wordpress, Ubuntu:20.04:LTS: wordpress, Ubuntu:22.04:LTS: wordpress, Ubuntu:24.04:LTS: wordpress

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1231 WID-SEC-W-2023-1231 — WordPress: Mehrere Schwachstellen 2026-10-02T23:51:38.899103+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, einen CSRF-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.