https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:19:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-242796 EUVD-2026-242796 https://cve.radiocsirt.org/vuln/euvd-2026-242796 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5877 <p>The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it&#39;s affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL&#39;s, including RFC1918 private addresses, leading to a Server Side Request Forgery (SSRF) issue.</p> <p>The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it&#39;s affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL&#39;s, including RFC1918 private addresses, leading to a Server Side Request Forgery (SSRF) issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-5877 https://cve.radiocsirt.org/vuln/ghsa-3hh9-m6jx-r3jg <p>The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it&#39;s affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL&#39;s, including RFC1918 private addresses, leading to a Server Side Request Forgery (SSRF) issue.</p> <p>The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it&#39;s affiliate-toolkit-starter/tools/atkp_imagereceiver.php endpoint, allowing unauthenticated visitors to make requests to arbitrary URL&#39;s, including RFC1918 private addresses, leading to a Server Side Request Forgery (SSRF) issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3hh9-m6jx-r3jg https://cve.radiocsirt.org/vuln/gsd-2023-5877 gsd-2023-5877 https://cve.radiocsirt.org/vuln/gsd-2023-5877