https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:06:32.195116+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-25215 CVE-2019-25215 — ARI-Adminer <= 1.1.14 - Missing Authorization and No Direct File Access Restrictions 2026-10-07T15:06:32.213774+00:00

Affected: arisoft ARI Adminer – WordPress Database Manager, ari-soft ari_adminer

The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14. This makes it possible for unauthenticated attackers to call the files directly and perform a wide variety of unauthorized actions such as accessing a site's database and making changes.