https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:32:47.569502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351734 EUVD-2026-351734 2026-10-07T04:32:47.603183+00:00 EUVD-2026-351734 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15039 fkie_cve-2026-15039 2026-10-07T04:32:47.603240+00:00

The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-h5c4-q3vg-m4m7 GHSA-h5c4-q3vg-m4m7 2026-10-07T04:32:47.603276+00:00

The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution.