https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:00:49.861695+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-364215 EUVD-2026-364215 2026-10-06T04:00:49.916582+00:00 EUVD-2026-364215 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84898 fkie_cve-2026-84898 2026-10-06T04:00:49.916624+00:00

The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access and above to include and execute arbitrary local PHP files.

 https://cve.radiocsirt.org/vuln/ghsa-jr8r-6xgg-xqr4 GHSA-jr8r-6xgg-xqr4 2026-10-06T04:00:49.916658+00:00

The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access and above to include and execute arbitrary local PHP files.