https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:16:34.510038+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282967 EUVD-2026-282967 2026-10-05T16:16:34.558194+00:00 EUVD-2026-282967 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4380 fkie_cve-2025-4380 2026-10-05T16:16:34.558231+00:00

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases .php files can can be uploaded and included, or already exist on the site.

 https://cve.radiocsirt.org/vuln/ghsa-635h-h9cr-wcq9 GHSA-635h-h9cr-wcq9 2026-10-05T16:16:34.558266+00:00

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsa_template' parameter of the `bsa_preview_callback` function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases .php files can can be uploaded and included, or already exist on the site.