https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:59:23.279969+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-7808 EUVD-2026-7808 2026-10-03T13:59:23.282847+00:00 EUVD-2026-7808 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6971 fkie_cve-2023-6971 2026-10-03T13:59:23.282891+00:00

The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. NOTE: Successful exploitation of this vulnerability requires that the target server's php.ini is configured with 'allow_url_include' set to 'on'. This feature is deprecated as of PHP 7.4 and is disabled by default, but can still be explicitly enabled in later versions of PHP.

 https://cve.radiocsirt.org/vuln/ghsa-4vhp-8vcj-r74x GHSA-4vhp-8vcj-r74x 2026-10-03T13:59:23.282948+00:00

The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. NOTE: Successful exploitation of this vulnerability requires that the target server's php.ini is configured with 'allow_url_include' set to 'on'. This feature is deprecated as of PHP 7.4 and is disabled by default, but can still be explicitly enabled in later versions of PHP.

 https://cve.radiocsirt.org/vuln/gsd-2023-6971 gsd-2023-6971 2026-10-03T13:59:23.282984+00:00 gsd-2023-6971