https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:27:15.570284+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-12709 cnvd-2025-12709 2026-10-15T14:27:15.643064+00:00 cnvd-2025-12709 https://cve.radiocsirt.org/vuln/euvd-2026-242907 EUVD-2026-242907 2026-10-15T14:27:15.643099+00:00 EUVD-2026-242907 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4578 fkie_cve-2025-4578 2026-10-15T14:27:15.643114+00:00

The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

 https://cve.radiocsirt.org/vuln/ghsa-4x7w-r9g5-mvxv GHSA-4x7w-r9g5-mvxv 2026-10-15T14:27:15.643143+00:00

The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection