https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:54:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-228932 EUVD-2026-228932 https://cve.radiocsirt.org/vuln/euvd-2026-228932 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4047 <p>The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE</p> <p>The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-4047 https://cve.radiocsirt.org/vuln/ghsa-3j85-6864-55p3 <p>The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE</p> <p>The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE</p> https://cve.radiocsirt.org/vuln/ghsa-3j85-6864-55p3 https://cve.radiocsirt.org/vuln/gsd-2022-4047 gsd-2022-4047 https://cve.radiocsirt.org/vuln/gsd-2022-4047