https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T00:40:13.760326+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286553 EUVD-2026-286553 2026-10-09T00:40:13.827779+00:00 EUVD-2026-286553 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9517 fkie_cve-2025-9517 2026-10-09T00:40:13.827834+00:00

The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This is due to insufficient sanitization when saving the custom log path. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.

 https://cve.radiocsirt.org/vuln/ghsa-ff78-934g-mr6h GHSA-ff78-934g-mr6h 2026-10-09T00:40:13.827886+00:00

The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This is due to insufficient sanitization when saving the custom log path. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.