https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:31:37.403716+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-4536 CVE-2023-4536 — My Account Page Editor < 1.3.2 - Subscriber+ Arbitrary File Upload 2026-10-06T22:31:37.404848+00:00

Affected: Unknown My Account Page Editor

The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such as subscriber to upload arbitrary files to the server, leading to RCE