https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:11:12.502686+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-287949 EUVD-2026-287949 2026-10-05T20:11:12.547175+00:00 EUVD-2026-287949 https://cve.radiocsirt.org/vuln/fkie_cve-2025-0818 fkie_cve-2025-0818 2026-10-05T20:11:12.547223+00:00

Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an instance of the file manager available to users.

 https://cve.radiocsirt.org/vuln/ghsa-fhmh-jw4r-2xp9 GHSA-fhmh-jw4r-2xp9 2026-10-05T20:11:12.547258+00:00

Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an instance of the file manager available to users.