https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T03:31:26.114727+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24236 CVE-2021-24236 — Imagements <= 1.2.5 - Unauthenticated Arbitrary File Upload to RCE 2026-10-15T03:31:26.115766+00:00

Affected: williewonka Imagements

The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.