https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:22:06.225528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-10711 cnvd-2018-10711 2026-10-02T13:22:06.327426+00:00 cnvd-2018-10711 https://cve.radiocsirt.org/vuln/euvd-2026-60798 EUVD-2026-60798 2026-10-02T13:22:06.327463+00:00 EUVD-2026-60798 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0587 fkie_cve-2018-0587 2026-10-02T13:22:06.327478+00:00

Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-m2cc-xh6j-cr9r GHSA-m2cc-xh6j-cr9r 2026-10-02T13:22:06.327506+00:00

Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to upload arbitrary image files via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2018-0587 gsd-2018-0587 2026-10-02T13:22:06.327522+00:00 gsd-2018-0587 https://cve.radiocsirt.org/vuln/jvndb-2018-000045 jvndb-2018-000045 2026-10-02T13:22:06.327533+00:00

The WordPress plugin "Ultimate Member" provided by Ultimate Member contains multiple vulnerabilities listed below. * Cross-site Scripting (CWE-79) - CVE-2018-0585 * Directory Traversal in the shortcodes function (CWE-22) - CVE-2018-0586 * Arbitrary File Upload (CWE-434) - CVE-2018-0587 * Directory Traversal in the AJAX function (CWE-22) - CVE-2018-0588 * Access Restriction Bypass in the "Forms" page (CWE-284) - CVE-2018-0589 * Access Restriction Bypass due to an issue in processing "Role" (CWE-284) - CVE-2018-0590 Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.