https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:43:22.404251+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-12860 cnvd-2025-12860 2026-10-15T14:43:22.406988+00:00 cnvd-2025-12860 https://cve.radiocsirt.org/vuln/euvd-2026-243766 EUVD-2026-243766 2026-10-15T14:43:22.407023+00:00 EUVD-2026-243766 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4954 fkie_cve-2025-4954 2026-10-15T14:43:22.407038+00:00

The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server

 https://cve.radiocsirt.org/vuln/ghsa-93gr-9vgp-hf59 GHSA-93gr-9vgp-hf59 2026-10-15T14:43:22.407066+00:00

The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server