https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:01:29.236653+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282739 EUVD-2026-282739 2026-10-09T18:01:29.294873+00:00 EUVD-2026-282739 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12066 fkie_cve-2024-12066 2026-10-09T18:01:29.294927+00:00

The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). CVE-2024-49249 is likely a duplicate of this issue.

 https://cve.radiocsirt.org/vuln/ghsa-7pgc-vj4f-cxq5 GHSA-7pgc-vj4f-cxq5 2026-10-09T18:01:29.294981+00:00

The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).