https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:11:27.255179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-281489 EUVD-2026-281489 2026-10-03T07:11:27.333046+00:00 EUVD-2026-281489 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3581 fkie_cve-2024-3581 2026-10-03T07:11:27.333092+00:00

The MaxGalleria plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the add_media_library_images_to_gallery function in all versions up to, and including, 6.4.2. This makes it possible for authenticated attackers, with subscriber access or above, to upload arbitrary images to a gallery.

 https://cve.radiocsirt.org/vuln/ghsa-6r3q-wq2w-2rxp GHSA-6r3q-wq2w-2rxp 2026-10-03T07:11:27.333133+00:00

The MaxGalleria plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the add_media_library_images_to_gallery function in all versions up to, and including, 6.4.2. This makes it possible for authenticated attackers, with subscriber access or above, to upload arbitrary images to a gallery.

 https://cve.radiocsirt.org/vuln/gsd-2024-3581 gsd-2024-3581 2026-10-03T07:11:27.333152+00:00 gsd-2024-3581