https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:19:59.155820+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-242796 EUVD-2026-242796 2026-10-04T11:19:59.158312+00:00 EUVD-2026-242796 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5877 fkie_cve-2023-5877 2026-10-04T11:19:59.158344+00:00

The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL's, including RFC1918 private addresses, leading to a Server Side Request Forgery (SSRF) issue.

 https://cve.radiocsirt.org/vuln/ghsa-3hh9-m6jx-r3jg GHSA-3hh9-m6jx-r3jg 2026-10-04T11:19:59.158376+00:00

The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL's, including RFC1918 private addresses, leading to a Server Side Request Forgery (SSRF) issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-5877 gsd-2023-5877 2026-10-04T11:19:59.158394+00:00 gsd-2023-5877