https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:42:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-47514 EUVD-2026-47514 https://cve.radiocsirt.org/vuln/euvd-2026-47514 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35314 <p>A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer.</p> <p>A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-35314 https://cve.radiocsirt.org/vuln/ghsa-xw74-8r5v-3xpv <p>An OS command injection vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer.</p> <p>An OS command injection vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer.</p> https://cve.radiocsirt.org/vuln/ghsa-xw74-8r5v-3xpv https://cve.radiocsirt.org/vuln/gsd-2020-35314 gsd-2020-35314 https://cve.radiocsirt.org/vuln/gsd-2020-35314