https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T05:09:33.077573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/fkie_cve-2025-34085 fkie_cve-2025-34085 2026-10-19T05:09:33.079273+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36847.

 https://cve.radiocsirt.org/vuln/ghsa-8xp7-p66p-4h9h GHSA-8xp7-p66p-4h9h 2026-10-19T05:09:33.079317+00:00

An unrestricted file upload vulnerability in the WordPress Simple File List plugin prior to version 4.2.3 allows unauthenticated remote attackers to achieve remote code execution. The plugin's upload endpoint (ee-upload-engine.php) restricts file uploads based on extension, but lacks proper validation after file renaming. An attacker can first upload a PHP payload disguised as a .png file, then use the plugin’s ee-file-engine.php rename functionality to change the extension to .php. This bypasses upload restrictions and results in the uploaded payload being executable on the server.