Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:02:22 +0000 cnvd-2021-29449 https://cve.radiocsirt.org/vuln/cnvd-2021-29449 cnvd-2021-29449 https://cve.radiocsirt.org/vuln/cnvd-2021-29449 EUVD-2026-47529 https://cve.radiocsirt.org/vuln/euvd-2026-47529 EUVD-2026-47529 https://cve.radiocsirt.org/vuln/euvd-2026-47529 fkie_cve-2020-35235 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35235 <p>vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer</p> <p>vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-35235 GHSA-cg8j-592g-v7p8 https://cve.radiocsirt.org/vuln/ghsa-cg8j-592g-v7p8 <p>** UNSUPPORTED WHEN ASSIGNED ** vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> <p>** UNSUPPORTED WHEN ASSIGNED ** vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p> https://cve.radiocsirt.org/vuln/ghsa-cg8j-592g-v7p8 gsd-2020-35235 https://cve.radiocsirt.org/vuln/gsd-2020-35235 gsd-2020-35235 https://cve.radiocsirt.org/vuln/gsd-2020-35235