https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 12:02:09 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-101468 cnvd-2021-101468 https://cve.radiocsirt.org/vuln/cnvd-2021-101468 https://cve.radiocsirt.org/vuln/euvd-2026-24144 EUVD-2026-24144 https://cve.radiocsirt.org/vuln/euvd-2026-24144 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24721 <p>The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated &#34;translator&#34; users being able to inject PHP code into files ending with .php in web accessible locations.</p> <p>The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated &#34;translator&#34; users being able to inject PHP code into files ending with .php in web accessible locations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24721 https://cve.radiocsirt.org/vuln/ghsa-8mj6-23hc-v88f <p>The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated &#34;translator&#34; users being able to inject PHP code into files ending with .php in web accessible locations.</p> <p>The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated &#34;translator&#34; users being able to inject PHP code into files ending with .php in web accessible locations.</p> https://cve.radiocsirt.org/vuln/ghsa-8mj6-23hc-v88f https://cve.radiocsirt.org/vuln/gsd-2021-24721 gsd-2021-24721 https://cve.radiocsirt.org/vuln/gsd-2021-24721