https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:58:48.439929+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-9517 CVE-2025-9517 — atec Debug <= 1.2.22 - Authenticated (Administrator+) Remote Code Execution 2026-10-08T16:58:48.454084+00:00

Affected: docjojo atec Debug

The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22 via the 'custom_log' parameter. This is due to insufficient sanitization when saving the custom log path. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.