Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:00:59 +0000 CVE-2025-11451 — Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.3 - Unauthenticated Arbitrary File Read https://cve.radiocsirt.org/vuln/cve-2025-11451 <p><strong>Affected:</strong> miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin</p> <p>The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the &#39;/wp-json/wp/v2/aal_ajax_unit_loading&#39; RST API endpoint. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.</p> <p><strong>Affected:</strong> miunosoft Auto Amazon Links – Amazon Associates Affiliate Plugin</p> <p>The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the &#39;/wp-json/wp/v2/aal_ajax_unit_loading&#39; RST API endpoint. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.</p> https://cve.radiocsirt.org/vuln/cve-2025-11451