https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:45:52.549355+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-16366 cnvd-2025-16366 2026-10-05T22:45:52.607498+00:00 cnvd-2025-16366 https://cve.radiocsirt.org/vuln/euvd-2026-286415 EUVD-2026-286415 2026-10-05T22:45:52.607543+00:00 EUVD-2026-286415 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6423 fkie_cve-2025-6423 2026-10-05T22:45:52.607558+00:00

The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_submit_upload_file() function in all versions up to, and including, 2.3.5. This makes it possible for authenticated attackers with Subscriber-level access or higher to upload arbitrary files on the affected site's server which may make remote code execution possible.

 https://cve.radiocsirt.org/vuln/ghsa-qqx8-c7mj-52mh GHSA-qqx8-c7mj-52mh 2026-10-05T22:45:52.607591+00:00

The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_submit_upload_file() function in all versions up to, and including, 2.3.5. This makes it possible for authenticated attackers with Subscriber-level access or higher to upload arbitrary files on the affected site's server which may make remote code execution possible.