Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:43:34 +0000 EUVD-2026-344194 https://cve.radiocsirt.org/vuln/euvd-2026-344194 EUVD-2026-344194 https://cve.radiocsirt.org/vuln/euvd-2026-344194 fkie_cve-2026-16292 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16292 <p>The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user&#39;s uploaded file via a CSRF attack, which can be leveraged to download that file. When guest uploads are enabled, the same action is reachable unauthenticated against any user&#39;s file.</p> <p>The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user&#39;s uploaded file via a CSRF attack, which can be leveraged to download that file. When guest uploads are enabled, the same action is reachable unauthenticated against any user&#39;s file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16292 GHSA-2rf9-6fhx-g6mg https://cve.radiocsirt.org/vuln/ghsa-2rf9-6fhx-g6mg <p>The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user&#39;s uploaded file via a CSRF attack, which can be leveraged to download that file. When guest uploads are enabled, the same action is reachable unauthenticated against any user&#39;s file.</p> <p>The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its file-metadata update actions, allowing an attacker to modify the metadata of a logged-in user&#39;s uploaded file via a CSRF attack, which can be leveraged to download that file. When guest uploads are enabled, the same action is reachable unauthenticated against any user&#39;s file.</p> https://cve.radiocsirt.org/vuln/ghsa-2rf9-6fhx-g6mg