https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:31:01.602076+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348786 EUVD-2026-348786 2026-10-07T16:31:01.648068+00:00 EUVD-2026-348786 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13157 fkie_cve-2026-13157 2026-10-07T16:31:01.648104+00:00

The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-privilege users (Administrator by default, including non-super-admin site administrators on multisite) to upload executable PHP files to the uploads directory.

 https://cve.radiocsirt.org/vuln/ghsa-pvx9-4vfp-58m3 GHSA-pvx9-4vfp-58m3 2026-10-07T16:31:01.648139+00:00

The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test is disabled), allowing high-privilege users (Administrator by default, including non-super-admin site administrators on multisite) to upload executable PHP files to the uploads directory.