https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 21:32:54 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-01458 cnvd-2018-01458 https://cve.radiocsirt.org/vuln/cnvd-2018-01458 https://cve.radiocsirt.org/vuln/euvd-2026-79339 EUVD-2026-79339 https://cve.radiocsirt.org/vuln/euvd-2026-79339 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16949 <p>An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&amp;allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.</p> <p>An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&amp;allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16949 https://cve.radiocsirt.org/vuln/ghsa-76m2-6qg3-g4x6 <p>An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&amp;allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.</p> <p>An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&amp;allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-76m2-6qg3-g4x6 https://cve.radiocsirt.org/vuln/gsd-2017-16949 gsd-2017-16949 https://cve.radiocsirt.org/vuln/gsd-2017-16949