https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:39:16 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-83670 cnvd-2021-83670 https://cve.radiocsirt.org/vuln/cnvd-2021-83670 https://cve.radiocsirt.org/vuln/euvd-2026-217705 EUVD-2026-217705 https://cve.radiocsirt.org/vuln/euvd-2026-217705 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39352 <p>The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with administrative privileges to upload malicious files that can be used to achieve remote code execution.</p> <p>The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with administrative privileges to upload malicious files that can be used to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39352 https://cve.radiocsirt.org/vuln/ghsa-p6rq-prcm-f9fw <p>The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with administrative privileges to upload malicious files that can be used to achieve remote code execution.</p> <p>The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with administrative privileges to upload malicious files that can be used to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-p6rq-prcm-f9fw https://cve.radiocsirt.org/vuln/gsd-2021-39352 gsd-2021-39352 https://cve.radiocsirt.org/vuln/gsd-2021-39352