https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T03:33:24.288463+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281433 EUVD-2026-281433 2026-10-18T03:33:24.291537+00:00 EUVD-2026-281433 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3022 fkie_cve-2024-3022 2026-10-18T03:33:24.291577+00:00

The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions up to, and including 1.0.87. This allows an authenticated attacker with administrator-level capabilities or higher to upload arbitrary files on the affected site's server, enabling remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-qv9v-3p54-mr9f GHSA-qv9v-3p54-mr9f 2026-10-18T03:33:24.291625+00:00

The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions up to, and including 1.0.87. This allows an authenticated attacker with administrator-level capabilities or higher to upload arbitrary files on the affected site's server, enabling remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2024-3022 gsd-2024-3022 2026-10-18T03:33:24.291656+00:00 gsd-2024-3022