https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 19:26:26 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-69147 cnvd-2022-69147 https://cve.radiocsirt.org/vuln/cnvd-2022-69147 https://cve.radiocsirt.org/vuln/euvd-2026-23661 EUVD-2026-23661 https://cve.radiocsirt.org/vuln/euvd-2026-23661 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24254 <p>The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack.</p> <p>The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24254 https://cve.radiocsirt.org/vuln/ghsa-xmhj-gj46-9j4f <p>The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack.</p> <p>The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack.</p> https://cve.radiocsirt.org/vuln/ghsa-xmhj-gj46-9j4f https://cve.radiocsirt.org/vuln/gsd-2021-24254 gsd-2021-24254 https://cve.radiocsirt.org/vuln/gsd-2021-24254