https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T14:18:48.373150+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282829 EUVD-2026-282829 2026-10-05T14:18:48.424267+00:00 EUVD-2026-282829 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8145 fkie_cve-2025-8145 2026-10-05T14:18:48.424308+00:00

The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input in the get_lead_fields function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain in a Contact Form 7 plugin allows attackers to delete arbitrary files. Additionally, in certain server configurations, Remote Code Execution is possible

 https://cve.radiocsirt.org/vuln/ghsa-475r-f2r2-v34p GHSA-475r-f2r2-v34p 2026-10-05T14:18:48.424344+00:00

The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input in the get_lead_fields function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain in a Contact Form 7 plugin allows attackers to delete arbitrary files. Additionally, in certain server configurations, Remote Code Execution is possible