https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T19:45:18.343684+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-24050 EUVD-2026-24050 2026-10-16T19:45:18.405062+00:00 EUVD-2026-24050 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24639 fkie_cve-2021-24639 2026-10-16T19:45:18.405097+00:00

The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server.

 https://cve.radiocsirt.org/vuln/ghsa-9w5p-x556-4j8v GHSA-9w5p-x556-4j8v 2026-10-16T19:45:18.405128+00:00

The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server.

 https://cve.radiocsirt.org/vuln/gsd-2021-24639 gsd-2021-24639 2026-10-16T19:45:18.405146+00:00 gsd-2021-24639