@offseq.bsky.social on Bluesky

Post

OffSequence

offseq.bsky.social

did:plc:t5t6qep2vfipbi7f54demwev

Eventin WordPress plugin (≤4.1.22) faces HIGH-severity LFI (CVE-2026-15667). Contributors can execute PHP via REST API. Restrict privileges & monitor for a patch. https://radar.offseq.com/threat/cve-2026-15667-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-b89... https://radar.offseq.com/threat/cve-2026-15667-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-b89bc3860052e068

2026-09-09T03:00:28.166Z

Enable JavaScript to use Bluesky.

Learn more about Bluesky at bsky.social and atproto.com.