https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:36:59 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-18719 cnvd-2025-18719 https://cve.radiocsirt.org/vuln/cnvd-2025-18719 https://cve.radiocsirt.org/vuln/euvd-2026-288143 EUVD-2026-288143 https://cve.radiocsirt.org/vuln/euvd-2026-288143 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6253 <p>The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.3.0 via the prepare_template() function due to a missing capability check and insufficient controls on the filename specified. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.</p> <p>The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.3.0 via the prepare_template() function due to a missing capability check and insufficient controls on the filename specified. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6253 https://cve.radiocsirt.org/vuln/ghsa-7rrj-wjm7-pqg4 <p>The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.3.0 via the prepare_template() function due to a missing capability check and insufficient controls on the filename specified. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.</p> <p>The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.3.0 via the prepare_template() function due to a missing capability check and insufficient controls on the filename specified. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.</p> https://cve.radiocsirt.org/vuln/ghsa-7rrj-wjm7-pqg4