https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 23:34:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-105709 EUVD-2026-105709 https://cve.radiocsirt.org/vuln/euvd-2026-105709 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1916 <p>In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.</p> <p>In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1916 https://cve.radiocsirt.org/vuln/ghsa-mfp3-hghm-2qc5 <p>In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.</p> <p>In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been yet approved.</p> https://cve.radiocsirt.org/vuln/ghsa-mfp3-hghm-2qc5 https://cve.radiocsirt.org/vuln/gsd-2013-1916 gsd-2013-1916 https://cve.radiocsirt.org/vuln/gsd-2013-1916