https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:04:44.650558+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224846 EUVD-2026-224846 2026-10-12T22:04:44.699531+00:00 EUVD-2026-224846 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13617 fkie_cve-2024-13617 2026-10-12T22:04:44.699569+00:00

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server

 https://cve.radiocsirt.org/vuln/ghsa-f32g-h75h-7vgp GHSA-f32g-h75h-7vgp 2026-10-12T22:04:44.699606+00:00

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unauthenticated attackers to download arbitrary files from the server