Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:28:41 +0000 bdu:2021-03307 https://cve.radiocsirt.org/vuln/bdu:2021-03307 bdu:2021-03307 https://cve.radiocsirt.org/vuln/bdu:2021-03307 cnvd-2021-36538 https://cve.radiocsirt.org/vuln/cnvd-2021-36538 cnvd-2021-36538 https://cve.radiocsirt.org/vuln/cnvd-2021-36538 EUVD-2026-23601 https://cve.radiocsirt.org/vuln/euvd-2026-23601 EUVD-2026-23601 https://cve.radiocsirt.org/vuln/euvd-2026-23601 fkie_cve-2021-24192 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24192 <p>Low privileged users can use the AJAX action &#39;cp_plugins_do_button_job_later_callback&#39; in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.</p> <p>Low privileged users can use the AJAX action &#39;cp_plugins_do_button_job_later_callback&#39; in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24192 GHSA-qvhh-p8m2-pw7f https://cve.radiocsirt.org/vuln/ghsa-qvhh-p8m2-pw7f <p>Low privileged users can use the AJAX action &#39;cp_plugins_do_button_job_later_callback&#39; in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.</p> <p>Low privileged users can use the AJAX action &#39;cp_plugins_do_button_job_later_callback&#39; in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.</p> https://cve.radiocsirt.org/vuln/ghsa-qvhh-p8m2-pw7f gsd-2021-24192 https://cve.radiocsirt.org/vuln/gsd-2021-24192 gsd-2021-24192 https://cve.radiocsirt.org/vuln/gsd-2021-24192