Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:11:35 +0000 cnvd-2025-28730 https://cve.radiocsirt.org/vuln/cnvd-2025-28730 cnvd-2025-28730 https://cve.radiocsirt.org/vuln/cnvd-2025-28730 EUVD-2026-289885 https://cve.radiocsirt.org/vuln/euvd-2026-289885 EUVD-2026-289885 https://cve.radiocsirt.org/vuln/euvd-2026-289885 fkie_cve-2025-11521 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11521 <p>The Astra Security Suite – Firewall &amp; Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs for zip downloads and an easily guessable key in all versions up to, and including, 0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> <p>The Astra Security Suite – Firewall &amp; Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs for zip downloads and an easily guessable key in all versions up to, and including, 0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11521 GHSA-2vv4-mhf8-rgmr https://cve.radiocsirt.org/vuln/ghsa-2vv4-mhf8-rgmr <p>The Astra Security Suite – Firewall &amp; Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs for zip downloads and an easily guessable key in all versions up to, and including, 0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> <p>The Astra Security Suite – Firewall &amp; Malware Scan plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient validation of remote URLs for zip downloads and an easily guessable key in all versions up to, and including, 0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/ghsa-2vv4-mhf8-rgmr