https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:34:51 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11292 bdu:2026-11292 https://cve.radiocsirt.org/vuln/bdu:2026-11292 https://cve.radiocsirt.org/vuln/euvd-2026-287519 EUVD-2026-287519 https://cve.radiocsirt.org/vuln/euvd-2026-287519 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6389 <p>The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.</p> <p>The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-6389 https://cve.radiocsirt.org/vuln/ghsa-cpm8-v4gw-hgvh <p>The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.</p> <p>The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts.</p> https://cve.radiocsirt.org/vuln/ghsa-cpm8-v4gw-hgvh