https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:52:52.705690+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-65198 cnvd-2022-65198 2026-10-09T20:52:52.774500+00:00 cnvd-2022-65198 https://cve.radiocsirt.org/vuln/euvd-2026-11222 EUVD-2026-11222 2026-10-09T20:52:52.774548+00:00 EUVD-2026-11222 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0779 fkie_cve-2022-0779 2026-10-09T20:52:52.774563+00:00

The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads

 https://cve.radiocsirt.org/vuln/ghsa-g3g8-hxhq-mfvr GHSA-g3g8-hxhq-mfvr 2026-10-09T20:52:52.774596+00:00

The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads

 https://cve.radiocsirt.org/vuln/gsd-2022-0779 gsd-2022-0779 2026-10-09T20:52:52.774612+00:00 gsd-2022-0779