https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T19:13:08.418742+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-25052 CVE-2021-25052 — Button Generator < 2.3.3 - RFI leading to RCE via CSRF 2026-10-20T19:13:08.419903+00:00

Affected: Unknown Button Generator – easily Button Builder

The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.