Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:26:01 +0000 cnvd-2022-67602 https://cve.radiocsirt.org/vuln/cnvd-2022-67602 cnvd-2022-67602 https://cve.radiocsirt.org/vuln/cnvd-2022-67602 EUVD-2026-289561 https://cve.radiocsirt.org/vuln/euvd-2026-289561 EUVD-2026-289561 https://cve.radiocsirt.org/vuln/euvd-2026-289561 fkie_cve-2022-0888 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0888 <p>The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0</p> <p>The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0888 GHSA-6g4g-f39p-q93f https://cve.radiocsirt.org/vuln/ghsa-6g4g-f39p-q93f <p>The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0</p> <p>The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0</p> https://cve.radiocsirt.org/vuln/ghsa-6g4g-f39p-q93f gsd-2022-0888 https://cve.radiocsirt.org/vuln/gsd-2022-0888 gsd-2022-0888 https://cve.radiocsirt.org/vuln/gsd-2022-0888