https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:57:12.032732+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15444 bdu:2025-15444 2026-10-15T07:57:12.094619+00:00 bdu:2025-15444 https://cve.radiocsirt.org/vuln/euvd-2026-261090 EUVD-2026-261090 2026-10-15T07:57:12.094655+00:00 EUVD-2026-261090 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9501 fkie_cve-2025-9501 2026-10-15T07:57:12.094669+00:00

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.

 https://cve.radiocsirt.org/vuln/ghsa-wx46-pc78-pqhq GHSA-wx46-pc78-pqhq 2026-10-15T07:57:12.094699+00:00

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.