https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:40:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-237069 EUVD-2026-237069 https://cve.radiocsirt.org/vuln/euvd-2026-237069 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3720 <p>The Upload Media By URL WordPress plugin before 1.0.8 does not have CSRF check when uploading files, which could allow attackers to make logged in admins upload files (including HTML containing JS code for users with the unfiltered_html capability) on their behalf.</p> <p>The Upload Media By URL WordPress plugin before 1.0.8 does not have CSRF check when uploading files, which could allow attackers to make logged in admins upload files (including HTML containing JS code for users with the unfiltered_html capability) on their behalf.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3720 https://cve.radiocsirt.org/vuln/ghsa-v9xx-v54p-m2hw <p>The Upload Media By URL WordPress plugin before 1.0.8 does not have CSRF check when uploading files, which could allow attackers to make logged in admins upload files (including HTML containing JS code for users with the unfiltered_html capability) on their behalf.</p> <p>The Upload Media By URL WordPress plugin before 1.0.8 does not have CSRF check when uploading files, which could allow attackers to make logged in admins upload files (including HTML containing JS code for users with the unfiltered_html capability) on their behalf.</p> https://cve.radiocsirt.org/vuln/ghsa-v9xx-v54p-m2hw https://cve.radiocsirt.org/vuln/gsd-2023-3720 gsd-2023-3720 https://cve.radiocsirt.org/vuln/gsd-2023-3720