https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 16:05:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351626 EUVD-2026-351626 https://cve.radiocsirt.org/vuln/euvd-2026-351626 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19089 <p>The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remote code execution on servers that do not honour the directory&#39;s access rules.</p> <p>The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remote code execution on servers that do not honour the directory&#39;s access rules.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-19089 https://cve.radiocsirt.org/vuln/ghsa-76cm-vw34-ffw7 <p>The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remote code execution on servers that do not honour the directory&#39;s access rules.</p> <p>The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remote code execution on servers that do not honour the directory&#39;s access rules.</p> https://cve.radiocsirt.org/vuln/ghsa-76cm-vw34-ffw7