https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T22:12:30.335788+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-84898 fkie_cve-2026-84898 2026-10-04T22:12:30.386997+00:00

The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access and above to include and execute arbitrary local PHP files.

 https://vulnerability.circl.lu/vuln/ghsa-jr8r-6xgg-xqr4 GHSA-jr8r-6xgg-xqr4 2026-10-04T22:12:30.387073+00:00

The Eventin WordPress plugin before 4.1.21 does not properly validate a template path value before using it to include a local file, allowing users with contributor-level access and above to include and execute arbitrary local PHP files.