https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:42:52.300614+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-11411 bdu:2026-11411 2026-10-03T09:42:52.304371+00:00 bdu:2026-11411 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0979 certfr-2026-avi-0979 — De multiples vulnérabilités ont été découvertes dans WordPress. Certaines d'entre elles permettent à un attaquant de pr… 2026-10-03T09:42:52.304402+00:00 certfr-2026-avi-0979 https://cve.radiocsirt.org/vuln/euvd-2026-349445 EUVD-2026-349445 2026-10-03T09:42:52.304421+00:00 EUVD-2026-349445 https://cve.radiocsirt.org/vuln/fkie_cve-2026-64638 fkie_cve-2026-64638 2026-10-03T09:42:52.304433+00:00

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires successful social engineering of and explicit interaction by the target victim. This issue affects all versions of WordPress. Version 7.0.3 has been released, containing a fix for the vulnerability, and as a courtesy to users on older branches the fix has been backported to all branches back to 4.7. Discovered and responsibly disclosed by [the team at pwn.ai](https://pwn.ai/).

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-64638 UBUNTU-CVE-2026-64638 2026-10-03T09:42:52.304462+00:00

Affected: Ubuntu:16.04:LTS: wordpress, Ubuntu:18.04:LTS: wordpress, Ubuntu:20.04:LTS: wordpress, Ubuntu:22.04:LTS: wordpress, Ubuntu:24.04:LTS: wordpress, Ubuntu:26.04:LTS: wordpress

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires successful social engineering of and explicit interaction by the target victim. This issue affects all versions of WordPress. Version 7.0.3 has been released, containing a fix for the vulnerability, and as a courtesy to users on older branches the fix has been backported to all branches back to 4.7. Discovered and responsibly disclosed by [the team at pwn.ai](https://pwn.ai/).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2701 WID-SEC-W-2026-2701 — WordPress: Mehrere Schwachstellen 2026-10-03T09:42:52.304493+00:00

Ein Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.