Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:46:07 +0000 EUVD-2026-326344 https://cve.radiocsirt.org/vuln/euvd-2026-326344 EUVD-2026-326344 https://cve.radiocsirt.org/vuln/euvd-2026-326344 fkie_cve-2026-9067 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9067 <p>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint&#39;s intended media type, allowing unauthenticated users to upload any file type accepted by WordPress&#39;s media library through endpoints that should only accept images or videos.</p> <p>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint&#39;s intended media type, allowing unauthenticated users to upload any file type accepted by WordPress&#39;s media library through endpoints that should only accept images or videos.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9067 GHSA-cwcg-79p4-f24h https://cve.radiocsirt.org/vuln/ghsa-cwcg-79p4-f24h <p>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint&#39;s intended media type, allowing unauthenticated users to upload any file type accepted by WordPress&#39;s media library through endpoints that should only accept images or videos.</p> <p>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint&#39;s intended media type, allowing unauthenticated users to upload any file type accepted by WordPress&#39;s media library through endpoints that should only accept images or videos.</p> https://cve.radiocsirt.org/vuln/ghsa-cwcg-79p4-f24h