https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T08:20:24.010952+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-60860 EUVD-2026-60860 2026-10-13T08:20:24.014306+00:00 EUVD-2026-60860 https://cve.radiocsirt.org/vuln/fkie_cve-2018-0645 fkie_cve-2018-0645 2026-10-13T08:20:24.014333+00:00

MTAppjQuery 1.8.1 and earlier allows remote PHP code execution via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-x284-83mj-chv9 GHSA-x284-83mj-chv9 2026-10-13T08:20:24.014360+00:00

MTAppjQuery 1.8.1 and earlier allows remote PHP code execution via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2018-0645 gsd-2018-0645 2026-10-13T08:20:24.014376+00:00 gsd-2018-0645 https://cve.radiocsirt.org/vuln/jvndb-2018-000080 jvndb-2018-000080 2026-10-13T08:20:24.014387+00:00

MTAppjQuery provided by bit part LLC is a plugin for Movable Type. An older version PHP library Uploadify is incorporated in MTAppjQuery v1.8.1 and earlier versions and the older versions of Uploadify contains unrestricted upload of arbitrary file (CWE-434), which may lead to arbitrary PHP code execution if MTAppjQuery is used. ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.