https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:02:01 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-88250 cnvd-2022-88250 https://cve.radiocsirt.org/vuln/cnvd-2022-88250 https://cve.radiocsirt.org/vuln/euvd-2026-240759 EUVD-2026-240759 https://cve.radiocsirt.org/vuln/euvd-2026-240759 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24890 <p>The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file</p> <p>The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24890 https://cve.radiocsirt.org/vuln/ghsa-73qx-mm4g-5qj8 <p>The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file</p> <p>The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitrary PHP code in a file</p> https://cve.radiocsirt.org/vuln/ghsa-73qx-mm4g-5qj8 https://cve.radiocsirt.org/vuln/gsd-2021-24890 gsd-2021-24890 https://cve.radiocsirt.org/vuln/gsd-2021-24890