https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:53:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-289365 EUVD-2026-289365 https://cve.radiocsirt.org/vuln/euvd-2026-289365 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12002 <p>The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.6.0 via the &#39;sby_check_wp_submit&#39; AJAX action. This is due to insufficient sanitization of user-supplied data and the use of that data in a file operation. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, granted the &#39;Save Featured Images&#39; setting is enabled and &#39;Disable WP Posts&#39; is disabled. Note: This vulnerability only affects the Pro version of Feeds for YouTube.</p> <p>The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.6.0 via the &#39;sby_check_wp_submit&#39; AJAX action. This is due to insufficient sanitization of user-supplied data and the use of that data in a file operation. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, granted the &#39;Save Featured Images&#39; setting is enabled and &#39;Disable WP Posts&#39; is disabled. Note: This vulnerability only affects the Pro version of Feeds for YouTube.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12002 https://cve.radiocsirt.org/vuln/ghsa-m78r-r2pf-69wj <p>The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.6.0 via the &#39;sby_check_wp_submit&#39; AJAX action. This is due to insufficient sanitization of user-supplied data and the use of that data in a file operation. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, granted the &#39;Save Featured Images&#39; setting is enabled and &#39;Disable WP Posts&#39; is disabled. Note: This vulnerability only affects the Pro version of Feeds for YouTube.</p> <p>The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.6.0 via the &#39;sby_check_wp_submit&#39; AJAX action. This is due to insufficient sanitization of user-supplied data and the use of that data in a file operation. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, granted the &#39;Save Featured Images&#39; setting is enabled and &#39;Disable WP Posts&#39; is disabled. Note: This vulnerability only affects the Pro version of Feeds for YouTube.</p> https://cve.radiocsirt.org/vuln/ghsa-m78r-r2pf-69wj