https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T23:24:26.502535+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288525 EUVD-2026-288525 2026-10-08T23:24:26.551666+00:00 EUVD-2026-288525 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1911 fkie_cve-2025-1911 2026-10-08T23:24:26.551703+00:00

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.5.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary log files on the server.

 https://cve.radiocsirt.org/vuln/ghsa-9m8m-6289-mfmf GHSA-9m8m-6289-mfmf 2026-10-08T23:24:26.551742+00:00

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the admin_log_page() function in all versions up to, and including, 2.5.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary log files on the server.