https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:25:03.642152+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-83670 cnvd-2021-83670 2026-10-04T20:25:03.713020+00:00 cnvd-2021-83670 https://cve.radiocsirt.org/vuln/euvd-2026-217705 EUVD-2026-217705 2026-10-04T20:25:03.713057+00:00 EUVD-2026-217705 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39352 fkie_cve-2021-39352 2026-10-04T20:25:03.713072+00:00

The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with administrative privileges to upload malicious files that can be used to achieve remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-p6rq-prcm-f9fw GHSA-p6rq-prcm-f9fw 2026-10-04T20:25:03.713103+00:00

The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with administrative privileges to upload malicious files that can be used to achieve remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2021-39352 gsd-2021-39352 2026-10-04T20:25:03.713120+00:00 gsd-2021-39352