https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T15:57:49.808461+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281356 EUVD-2026-281356 2026-10-23T15:57:49.857095+00:00 EUVD-2026-281356 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4206 fkie_cve-2025-4206 2026-10-23T15:57:49.857133+00:00

The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'process_export_delete' and 'process_import_delete' functions in all versions up to, and including, 4.1.1.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

 https://cve.radiocsirt.org/vuln/ghsa-35m2-qpj3-cgx8 GHSA-35m2-qpj3-cgx8 2026-10-23T15:57:49.857173+00:00

The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'process_export_delete' and 'process_import_delete' functions in all versions up to, and including, 4.1.1.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).