Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:50:40 +0000 EUVD-2026-284557 https://cve.radiocsirt.org/vuln/euvd-2026-284557 EUVD-2026-284557 https://cve.radiocsirt.org/vuln/euvd-2026-284557 fkie_cve-2024-10586 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10586 <p>The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue.</p> <p>The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10586 GHSA-m3hx-38j6-phw2 https://cve.radiocsirt.org/vuln/ghsa-m3hx-38j6-phw2 <p>The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution.</p> <p>The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-m3hx-38j6-phw2