https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 23:34:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-284227 EUVD-2026-284227 https://cve.radiocsirt.org/vuln/euvd-2026-284227 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6431 <p>The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing capability check in the &#39;sendMail&#39; function in all versions up to, and including, 2.10.13. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible. The vulnerability is only exploitable if anyone has ever logged in through the API.</p> <p>The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing capability check in the &#39;sendMail&#39; function in all versions up to, and including, 2.10.13. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible. The vulnerability is only exploitable if anyone has ever logged in through the API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-6431 https://cve.radiocsirt.org/vuln/ghsa-m6gw-g872-xp52 <p>The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing capability check in the &#39;sendMail&#39; function in all versions up to, and including, 2.10.13. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible. The vulnerability is only exploitable if anyone has ever logged in through the API.</p> <p>The Media.net Ads Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and missing capability check in the &#39;sendMail&#39; function in all versions up to, and including, 2.10.13. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible. The vulnerability is only exploitable if anyone has ever logged in through the API.</p> https://cve.radiocsirt.org/vuln/ghsa-m6gw-g872-xp52