https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 02:47:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03267 bdu:2021-03267 https://cve.radiocsirt.org/vuln/bdu:2021-03267 https://cve.radiocsirt.org/vuln/cnvd-2021-36049 cnvd-2021-36049 https://cve.radiocsirt.org/vuln/cnvd-2021-36049 https://cve.radiocsirt.org/vuln/euvd-2026-23662 EUVD-2026-23662 https://cve.radiocsirt.org/vuln/euvd-2026-23662 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24253 <p>The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.</p> <p>The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24253 https://cve.radiocsirt.org/vuln/ghsa-rrx2-h7gv-6jx5 <p>The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.</p> <p>The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.</p> https://cve.radiocsirt.org/vuln/ghsa-rrx2-h7gv-6jx5 https://cve.radiocsirt.org/vuln/gsd-2021-24253 gsd-2021-24253 https://cve.radiocsirt.org/vuln/gsd-2021-24253