https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T12:35:49.320843+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278661 EUVD-2026-278661 2026-10-10T12:35:49.323118+00:00 EUVD-2026-278661 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13070 fkie_cve-2025-13070 2026-10-10T12:35:49.323153+00:00

The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as contributor to perform LFI attacks.

 https://cve.radiocsirt.org/vuln/ghsa-m3hv-42v8-h9h3 GHSA-m3hv-42v8-h9h3 2026-10-10T12:35:49.323183+00:00

The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as contributor to perform LFI attacks.