https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T02:11:38.475179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287496 EUVD-2026-287496 2026-10-22T02:11:38.477730+00:00 EUVD-2026-287496 https://cve.radiocsirt.org/vuln/fkie_cve-2017-20207 fkie_cve-2017-20207 2026-10-22T02:11:38.477773+00:00

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the `pager ` parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerability with the WP_Theme() class to create backdoors.

 https://cve.radiocsirt.org/vuln/ghsa-vv63-gqpw-3x4p GHSA-vv63-gqpw-3x4p 2026-10-22T02:11:38.477808+00:00

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the `pager ` parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerability with the WP_Theme() class to create backdoors.