https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T15:59:32.043986+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-09090 cnvd-2025-09090 2026-10-12T15:59:32.092316+00:00 cnvd-2025-09090 https://cve.radiocsirt.org/vuln/euvd-2026-286905 EUVD-2026-286905 2026-10-12T15:59:32.092367+00:00 EUVD-2026-286905 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3914 fkie_cve-2025-3914 2026-10-12T15:59:32.092391+00:00

The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

 https://cve.radiocsirt.org/vuln/ghsa-xf25-83cp-2q6v GHSA-xf25-83cp-2q6v 2026-10-12T15:59:32.092435+00:00

The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aeropage_media_downloader' function in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.