https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:13:49.102268+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-20075 CVE-2016-20075 — WordPress Ultimate Product Catalog 3.8.6 Arbitrary File Upload RCE 2026-10-07T17:13:49.118596+00:00

Affected: Etoilewebdesign Ultimate Product Catalog

WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulnerability that allows authenticated users with contributor, editor, author, or administrator roles to upload malicious files by exploiting the custom fields functionality. Attackers can upload PHP shells through the Products tab custom file field and access them via the upcp-product-file-uploads directory to execute arbitrary code on the server.