https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:04:41.892932+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318081 EUVD-2026-318081 2026-10-07T12:04:41.949676+00:00 EUVD-2026-318081 https://cve.radiocsirt.org/vuln/fkie_cve-2020-37169 fkie_cve-2020-37169 2026-10-07T12:04:41.949724+00:00

WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the pack parameter in class-admin-upgrade.php. Attackers can send POST requests with malicious pack values to include unintended PHP files from the packages directory and execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-vm2q-f7mg-hvvh GHSA-vm2q-f7mg-hvvh 2026-10-07T12:04:41.949774+00:00

WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the pack parameter in class-admin-upgrade.php. Attackers can send POST requests with malicious pack values to include unintended PHP files from the packages directory and execute arbitrary code.