https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 06:14:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-286316 EUVD-2026-286316 https://cve.radiocsirt.org/vuln/euvd-2026-286316 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3585 <p>The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the &#39;ajax_create_import&#39; function. This makes it possible for authenticated attackers, with Author-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.</p> <p>The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the &#39;ajax_create_import&#39; function. This makes it possible for authenticated attackers, with Author-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-3585 https://cve.radiocsirt.org/vuln/ghsa-2mf5-m2w3-fr4j <p>The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the &#39;ajax_create_import&#39; function. This makes it possible for authenticated attackers, with Author-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.</p> <p>The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the &#39;ajax_create_import&#39; function. This makes it possible for authenticated attackers, with Author-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.</p> https://cve.radiocsirt.org/vuln/ghsa-2mf5-m2w3-fr4j