https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:00:25.631484+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-62907 CVE-2025-62907 — WordPress Custom Post Type Attachment plugin <= 3.4.6 - Cross Site Scripting (XSS) vulnerability 2026-10-08T03:00:25.647749+00:00

Affected: aviplugins.com Custom Post Type Attachment

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com Custom Post Type Attachment custom-post-type-pdf-attachment allows Stored XSS.This issue affects Custom Post Type Attachment: from n/a through <= 3.4.6.