Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:04:15 +0000 EUVD-2026-293363 https://cve.radiocsirt.org/vuln/euvd-2026-293363 EUVD-2026-293363 https://cve.radiocsirt.org/vuln/euvd-2026-293363 fkie_cve-2021-31567 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31567 <p>Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions &lt;= 4.4.6). The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &amp;downloadable_file_urls[0] parameter data. It&#39;s also possible to escape from the web server home directory and download any file within the OS.</p> <p>Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions &lt;= 4.4.6). The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &amp;downloadable_file_urls[0] parameter data. It&#39;s also possible to escape from the web server home directory and download any file within the OS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-31567 GHSA-7q5c-gm5x-mj54 https://cve.radiocsirt.org/vuln/ghsa-7q5c-gm5x-mj54 <p>Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions &lt;= 4.4.6). The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &amp;downloadable_file_urls[0] parameter data. It&#39;s also possible to escape from the web server home directory and download any file within the OS.</p> <p>Authenticated (admin+) Arbitrary File Download vulnerability discovered in Download Monitor WordPress plugin (versions &lt;= 4.4.6). The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the &amp;downloadable_file_urls[0] parameter data. It&#39;s also possible to escape from the web server home directory and download any file within the OS.</p> https://cve.radiocsirt.org/vuln/ghsa-7q5c-gm5x-mj54 gsd-2021-31567 https://cve.radiocsirt.org/vuln/gsd-2021-31567 gsd-2021-31567 https://cve.radiocsirt.org/vuln/gsd-2021-31567