https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T21:09:17.780832+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25053 CVE-2021-25053 — WP Coder < 2.5.2 - RFI leading to RCE via CSRF 2026-10-21T21:09:17.782330+00:00

Affected: Unknown WP Coder – add custom html, css and js code

The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.