https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:26:30.277364+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-212931 EUVD-2026-212931 2026-10-09T18:26:30.280543+00:00 EUVD-2026-212931 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28409 fkie_cve-2023-28409 2026-10-09T18:26:30.280575+00:00

Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file.

 https://cve.radiocsirt.org/vuln/ghsa-3hh7-86f2-m64w GHSA-3hh7-86f2-m64w 2026-10-09T18:26:30.280605+00:00

Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticated attacker to upload an arbitrary file.

 https://cve.radiocsirt.org/vuln/gsd-2023-28409 gsd-2023-28409 2026-10-09T18:26:30.280621+00:00 gsd-2023-28409 https://cve.radiocsirt.org/vuln/jvndb-2023-000050 jvndb-2023-000050 2026-10-09T18:26:30.280633+00:00

WordPress Plugin "MW WP Form" and "Snow Monkey Forms" provided by Monkey Wrench Inc. contain multiple vulnerabilities listed below. * Directory traversal (CWE-22) - CVE-2023-28408 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2023-28409 * Directory traversal (CWE-22) - CVE-2023-28413 CVE-2023-28408 Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-28409 Shuya Ota of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2023-28413 Monkey Wrench Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.