https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:06:13.737951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10242 bdu:2026-10242 2026-10-02T09:06:13.745453+00:00 bdu:2026-10242 https://cve.radiocsirt.org/vuln/bit-wordpress-2026-60137 BIT-wordpress-2026-60137 — WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query 2026-10-02T09:06:13.745487+00:00

Affected: Bitnami: wordpress

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

 https://cve.radiocsirt.org/vuln/certfr-2026-ale-007 certfr-2026-ale-007 — Le 17 juillet 2026, WordPress a publié un correctif pour deux vulnérabilités : <ul> <li>CVE-2026-60137 : une injection… 2026-10-02T09:06:13.745518+00:00 certfr-2026-ale-007 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0904 certfr-2026-avi-0904 — De multiples vulnérabilités ont été découvertes dans WordPress. Elles permettent à un attaquant de provoquer une exécut… 2026-10-02T09:06:13.745539+00:00 certfr-2026-avi-0904 https://cve.radiocsirt.org/vuln/euvd-2026-342514 EUVD-2026-342514 2026-10-02T09:06:13.745552+00:00 EUVD-2026-342514 https://cve.radiocsirt.org/vuln/fkie_cve-2026-60137 fkie_cve-2026-60137 2026-10-02T09:06:13.745563+00:00

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0250 NCSC-2026-0250 — Kwetsbaarheden verholpen in WordPress door Automattic 2026-10-02T09:06:13.745584+00:00 NCSC-2026-0250 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-60137 UBUNTU-CVE-2026-60137 2026-10-02T09:06:13.745600+00:00

Affected: Ubuntu:16.04:LTS: wordpress, Ubuntu:18.04:LTS: wordpress, Ubuntu:20.04:LTS: wordpress, Ubuntu:22.04:LTS: wordpress, Ubuntu:24.04:LTS: wordpress, Ubuntu:26.04:LTS: wordpress

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2409 WID-SEC-W-2026-2409 — WordPress: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-02T09:06:13.745625+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um beliebigen Programmcode auszuführen.