https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T23:33:45.309988+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281308 EUVD-2026-281308 2026-10-07T23:33:45.358319+00:00 EUVD-2026-281308 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3623 fkie_cve-2025-3623 2026-10-07T23:33:45.358359+00:00

The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automator_api_decode_message() function. This makes it possible for unauthenticated to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files.

 https://cve.radiocsirt.org/vuln/ghsa-35ch-876f-6mw7 GHSA-35ch-876f-6mw7 2026-10-07T23:33:45.358393+00:00

The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automator_api_decode_message() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files.