https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:46:46.394102+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-289389 EUVD-2026-289389 2026-10-06T07:46:46.445568+00:00 EUVD-2026-289389 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9624 fkie_cve-2024-9624 2026-10-06T07:46:46.445611+00:00

The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.9.3 due to missing SSRF protection on the pmxi_curl_download function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. On cloud platforms, it might allow attackers to read the Instance metadata.

 https://cve.radiocsirt.org/vuln/ghsa-v5j5-586p-q8qm GHSA-v5j5-586p-q8qm 2026-10-06T07:46:46.445648+00:00

The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.9.3 due to missing SSRF protection on the pmxi_curl_download function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. On cloud platforms, it might allow attackers to read the Instance metadata.