https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 01:01:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11307 bdu:2026-11307 https://cve.radiocsirt.org/vuln/bdu:2026-11307 https://cve.radiocsirt.org/vuln/euvd-2026-265312 EUVD-2026-265312 https://cve.radiocsirt.org/vuln/euvd-2026-265312 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12057 <p>The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally, allowing unauthenticated users to upload arbitrary file on the server and lead to RCE</p> <p>The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally, allowing unauthenticated users to upload arbitrary file on the server and lead to RCE</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12057 https://cve.radiocsirt.org/vuln/ghsa-5h9q-jf3c-852w <p>The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally, allowing unauthenticated users to upload arbitrary file on the server and lead to RCE</p> <p>The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally, allowing unauthenticated users to upload arbitrary file on the server and lead to RCE</p> https://cve.radiocsirt.org/vuln/ghsa-5h9q-jf3c-852w