https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:39:13.374676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-4298 CVE-2022-4298 — Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download 2026-10-05T21:39:13.390372+00:00

Affected: Unknown Wholesale Market

The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.