https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:31:25.198718+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-4954 CVE-2025-4954 — Axle Demo Importer <= 1.0.3 - Author+ Arbitrary File Upload 2026-10-15T23:31:25.201153+00:00

Affected: Unknown Axle Demo Importer

The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server