https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T03:32:06.491081+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24254 CVE-2021-24254 — College Publisher Import <= 0.1 - Arbitrary File Upload to RCE 2026-10-15T03:32:06.492378+00:00

Affected: Unknown College publisher Import

The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack.