Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 03:11:54 +0000 cnvd-2025-18834 https://cve.radiocsirt.org/vuln/cnvd-2025-18834 cnvd-2025-18834 https://cve.radiocsirt.org/vuln/cnvd-2025-18834 EUVD-2026-288998 https://cve.radiocsirt.org/vuln/euvd-2026-288998 EUVD-2026-288998 https://cve.radiocsirt.org/vuln/euvd-2026-288998 fkie_cve-2025-8418 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8418 <p>The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1.1.30. This is due to missing capability checks on the activated_plugin function. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the server which can make remote code execution possible.</p> <p>The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1.1.30. This is due to missing capability checks on the activated_plugin function. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the server which can make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8418 GHSA-pvwc-33hq-3ppw https://cve.radiocsirt.org/vuln/ghsa-pvwc-33hq-3ppw <p>The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1.1.30. This is due to missing capability checks on the activated_plugin function. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the server which can make remote code execution possible.</p> <p>The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1.1.30. This is due to missing capability checks on the activated_plugin function. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the server which can make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/ghsa-pvwc-33hq-3ppw