https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:37:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-11043 EUVD-2026-11043 https://cve.radiocsirt.org/vuln/euvd-2026-11043 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0537 <p>The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the &#34;ajax_save&#34; function. The file is written relative to the current &#39;s stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.</p> <p>The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the &#34;ajax_save&#34; function. The file is written relative to the current &#39;s stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0537 https://cve.radiocsirt.org/vuln/ghsa-5w72-p3x5-c825 <p>The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the &#34;ajax_save&#34; function. The file is written relative to the current &#39;s stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.</p> <p>The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the &#34;ajax_save&#34; function. The file is written relative to the current &#39;s stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.</p> https://cve.radiocsirt.org/vuln/ghsa-5w72-p3x5-c825 https://cve.radiocsirt.org/vuln/gsd-2022-0537 gsd-2022-0537 https://cve.radiocsirt.org/vuln/gsd-2022-0537