https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:12:57.676639+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-03224 bdu:2024-03224 2026-10-03T18:12:57.816581+00:00 bdu:2024-03224 https://cve.radiocsirt.org/vuln/euvd-2026-202446 EUVD-2026-202446 2026-10-03T18:12:57.816641+00:00 EUVD-2026-202446 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28890 fkie_cve-2024-28890 2026-10-03T18:12:57.816664+00:00

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition.

 https://cve.radiocsirt.org/vuln/ghsa-5q9m-f76w-7rm3 GHSA-5q9m-f76w-7rm3 2026-10-03T18:12:57.816712+00:00

Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessing files on the server, alter the site that uses the plugin, and cause a denial-of-service (DoS) condition.

 https://cve.radiocsirt.org/vuln/gsd-2024-28890 gsd-2024-28890 2026-10-03T18:12:57.816739+00:00 gsd-2024-28890 https://cve.radiocsirt.org/vuln/jvndb-2024-000041 jvndb-2024-000041 2026-10-03T18:12:57.816758+00:00

WordPress Plugin "Forminator" provided by WPMU DEV contains multiple vulnerabilities listed below. * Unrestricted upload of file with dangerous type (CWE-434) * SQL injection (CWE-89) * Cross-site scripting (CWE-79) hibiki moriyama of STNet, Incorporated reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.