https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 05:19:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-361100 EUVD-2026-361100 https://cve.radiocsirt.org/vuln/euvd-2026-361100 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12514 <p>The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visitor can upload files to a publicly accessible directory and read the server&#39;s absolute path from the response. Uploads are limited to WordPress&#39;s allowed MIME types, so executable PHP cannot be uploaded.</p> <p>The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visitor can upload files to a publicly accessible directory and read the server&#39;s absolute path from the response. Uploads are limited to WordPress&#39;s allowed MIME types, so executable PHP cannot be uploaded.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12514 https://cve.radiocsirt.org/vuln/ghsa-4qpc-6xpr-g8g2 <p>The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visitor can upload files to a publicly accessible directory and read the server&#39;s absolute path from the response. Uploads are limited to WordPress&#39;s allowed MIME types, so executable PHP cannot be uploaded.</p> <p>The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an unauthenticated visitor can upload files to a publicly accessible directory and read the server&#39;s absolute path from the response. Uploads are limited to WordPress&#39;s allowed MIME types, so executable PHP cannot be uploaded.</p> https://cve.radiocsirt.org/vuln/ghsa-4qpc-6xpr-g8g2