https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:25:35.354414+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-31822 cnvd-2022-31822 2026-10-06T04:25:35.418315+00:00 cnvd-2022-31822 https://cve.radiocsirt.org/vuln/euvd-2026-24279 EUVD-2026-24279 2026-10-06T04:25:35.418354+00:00 EUVD-2026-24279 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24947 fkie_cve-2021-24947 2026-10-06T04:25:35.418368+00:00

The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server

 https://cve.radiocsirt.org/vuln/ghsa-4665-x724-m73j GHSA-4665-x724-m73j 2026-10-06T04:25:35.418398+00:00

The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server

 https://cve.radiocsirt.org/vuln/gsd-2021-24947 gsd-2021-24947 2026-10-06T04:25:35.418414+00:00 gsd-2021-24947