https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T00:41:42.594398+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-4063 CVE-2022-4063 — InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE 2026-10-05T00:41:42.609617+00:00

Affected: Unknown InPost Gallery

The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.