https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:04:32.393871+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-361097 EUVD-2026-361097 2026-10-06T11:04:32.396255+00:00 EUVD-2026-361097 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19084 fkie_cve-2026-19084 2026-10-06T11:04:32.396287+00:00

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL.

 https://cve.radiocsirt.org/vuln/ghsa-vw7p-45x7-3754 GHSA-vw7p-45x7-3754 2026-10-06T11:04:32.396317+00:00

The shared-files-pro WordPress plugin before 1.7.70 does not validate the file path supplied when creating a featured image, allowing unauthenticated attackers to read arbitrary files from the server and republish their contents at a public URL.