https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 03:52:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-23576 EUVD-2026-23576 https://cve.radiocsirt.org/vuln/euvd-2026-23576 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24123 <p>Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privilege accounts (admin+) being able to upload arbitrary files, such as php, leading to RCE.</p> <p>Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privilege accounts (admin+) being able to upload arbitrary files, such as php, leading to RCE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24123 https://cve.radiocsirt.org/vuln/ghsa-7cm9-xr5m-957v <p>Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privilege accounts (admin+) being able to upload arbitrary files, such as php, leading to RCE.</p> <p>Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privilege accounts (admin+) being able to upload arbitrary files, such as php, leading to RCE.</p> https://cve.radiocsirt.org/vuln/ghsa-7cm9-xr5m-957v https://cve.radiocsirt.org/vuln/gsd-2021-24123 gsd-2021-24123 https://cve.radiocsirt.org/vuln/gsd-2021-24123