https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:24:21.610187+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286915 EUVD-2026-286915 2026-10-06T04:24:21.685577+00:00 EUVD-2026-286915 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25105 fkie_cve-2018-25105 2026-10-06T04:24:21.685617+00:00

The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in versions up to, and including, 3.0. This makes it possible for unauthenticated attackers to download arbitrary files from the server and upload arbitrary files that can be used for remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-9f9w-6h4v-8h8v GHSA-9f9w-6h4v-8h8v 2026-10-06T04:24:21.685652+00:00

The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in versions up to, and including, 3.0. This makes it possible for unauthenticated attackers to download arbitrary files from the server and upload arbitrary files that can be used for remote code execution.